[Snort-sigs] rule possibly misfiring

Chris Green cmg at ...435...
Tue Jan 28 08:10:05 EST 2003

"Kreimendahl, Chad J" <Chad.Kreimendahl at ...361...> writes:

> Yeah, same here.... could spo_database have injected the wrong data
> stream?

I can see this problem happening on B29.  On Build 49 it should work

Did the packet that I create match what spo_database logged from a
content perspective?
Chris Green <cmg at ...435...>
Let not the sands of time get in your lunch.

More information about the Snort-sigs mailing list