[Snort-devel] [ snort-Bugs-810623 ] Double logging using stream 4

SourceForge.net noreply at ...12...
Mon Sep 22 07:33:11 EDT 2003


Bugs item #810623, was opened at 2003-09-22 07:18
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=103357&aid=810623&group_id=3357

Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Nobody/Anonymous (nobody)
Assigned to: Nobody/Anonymous (nobody)
Summary: Double logging using stream 4

Initial Comment:
I'm on a test network that has no other traffic. As a 

test I telnet into the smtp server and sent a single 

message. The resulting session file has the message in it

exactly twice.



The config file I use is: 



frag2

stream4: timeout 60

stream4_reassembly: client only

log tcp any any -> any 25 (session: printable;)



dorwin at earthlink dot net



----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=103357&aid=810623&group_id=3357




More information about the Snort-devel mailing list