[Snort-devel] New entry in Signature table for tagged packets

Frank Knobbe frank at ...2134...
Thu Nov 25 14:13:31 EST 2004


On Thu, 2004-11-25 at 16:00, Frank Knobbe wrote:
> it looks like Snort creates a new entry for "Tagged Packet" in the
> signature table on every tagged packet. It enters the same name, class,
> priority, rev and sid each time.

As a follow-up, it appears that the "parent" signature that caused the
gag is also entered multiple times.

Regards,
Frank

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 187 bytes
Desc: This is a digitally signed message part
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20041125/b7624bbc/attachment.sig>


More information about the Snort-devel mailing list