[Snort-sigs] rule possibly misfiring

Chris Green cmg at ...435...
Tue Jan 28 08:10:05 EST 2003


"Kreimendahl, Chad J" <Chad.Kreimendahl at ...361...> writes:

> Yeah, same here.... could spo_database have injected the wrong data
> stream?

I can see this problem happening on B29.  On Build 49 it should work
correctly.

Did the packet that I create match what spo_database logged from a
content perspective?
-- 
Chris Green <cmg at ...435...>
Let not the sands of time get in your lunch.




More information about the Snort-sigs mailing list