[Snort-devel] Snort v2 and flags ECE/CWR ...
cmg at ...402...
Wed Apr 16 12:42:03 EDT 2003
rmkml <rmkml at ...1042...> writes:
> ok solved,
> In my conf, I add detect_scans in your stream4 preprocessor ...
> but detect_scans is default config,
> and snort not detect this packet on default config ...
> Fix this ?
Working as intended :) 1 Event per packet, the packet is saved. It's
the analyst who gets to look at it.
> Thanks for your help.
Chris Green <cmg at ...402...>
More information about the Snort-devel