[Snort-sigs] duplicate packets checking

Igor Belikov ivb at ...3127...
Mon Aug 15 00:41:15 EDT 2005

Hello snort-sigs,

  Is it possible to write rule that will be check duplicate packets?

  Sometimes some switches in local network go in half-working <g>
  mode and begin to multiply received packets. So such rules will be
  helpful to discover broken switches.

Best regards,
 Igor                          mailto:belikoviv at ...3127...

More information about the Snort-sigs mailing list