[Snort-users] "Incomplete Fragments" logging wrong on HP-UX 10.20
Ralf.Hildebrandt at ...821...
Sat Apr 7 08:41:37 EDT 2001
It's me again, Ralf with the obscure OS form hell -- HP-UX 10.20.
Again, running programs on HP-UX no admin was ever meant to run :)
Snort (CVS checkout from today -- and all old versions as well) reports:
Apr 7 11:34:50 stahlw06 snort: Incomplete Packet Fragments Discarded: 184.108.40.206 -> 220.127.116.11
but I'm sure it's meant to be:
18.104.22.168 -> 22.214.171.124
So the first two bytes of an IP seem to be swapped with the last two bytes.
ralf.hildebrandt at ...821... innominate AG
System Engineer Don't be afraid of what you see -
Diplom-Informatiker be afraid of what you don't see!
tel: +49.(0)7000.POSTFIX fax: +49.(0)30.308806-698
More information about the Snort-users