[Snort-sigs] duplicate packets checking

Igor Belikov ivb at ...3127...
Mon Aug 15 00:41:15 EDT 2005


Hello snort-sigs,

  Is it possible to write rule that will be check duplicate packets?

  Sometimes some switches in local network go in half-working <g>
  mode and begin to multiply received packets. So such rules will be
  helpful to discover broken switches.

-- 
Best regards,
 Igor                          mailto:belikoviv at ...3127...





More information about the Snort-sigs mailing list