[Snort-users] Uh-oh... bad ftp login

Fyodor fygrave at ...121...
Mon Oct 30 15:01:59 EST 2000


On Mon, Oct 30, 2000 at 07:14:31PM +0100, Jan Muenther wrote:
> Does snort take the time stamp from the packets that the source
> originated?

No, time is taken from timestamp supplied by libpcap and normally states
local system time, when the packet was captured off the wire. :)





More information about the Snort-users mailing list