[Snort-devel] new pb on snort v2 ? (icmp large packet)

rmkml rmkml at ...1042...
Wed Apr 23 07:57:10 EDT 2003


ok thanks,

You are news on tcp ECE/CWR pb on stream4 preproc ? (snort v2 of course)

new snapshot fix this ?

Regard.



Chris Green wrote:

> rmkml <rmkml at ...1042...> writes:
>
> > Hi,
>
> I get large ping requests if I comment out the icmp-info.rules, echo
> request/reply otherwise.
>
> It is a difference in functionality and we'll see if the something
> closer to the old way can be done.
>
> I've just verified this and Marc's going to go look at it.
>
> > I have to forget something ?
> >
> > Thanks for your help...
> >
> > Regard.
>
> --
> Chris Green <cmg at ...402...>
> Warning: time of day goes back, taking countermeasures.





More information about the Snort-devel mailing list