[Snort-sigs] Syn, Ack, Syn/Ack

James Ashton James at ...2424...
Fri May 28 04:34:13 EDT 2004


Does anyone have a good method of using snort to detect incorrect syn,
ack traffic.  I am looking for a preprocessor that will alert on
incorrect syn/ack responses. I have some things that I would like snort
to activate in the case of this type of traffic. Are there any setting
to current preprocessors that will take care of this? I know that I am
not getting any matches on the bad packets that I am seeing on the
network.

 

Thanks

James Ashton

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20040528/8af5e95d/attachment.html>


More information about the Snort-sigs mailing list