[Snort-users] "Incomplete Fragments" logging wrong on HP-UX 10.20
roesch at ...421...
Mon Apr 9 00:57:43 EDT 2001
Sounds like a job for Dragos... :)
Ralf Hildebrandt wrote:
> It's me again, Ralf with the obscure OS form hell -- HP-UX 10.20.
> Again, running programs on HP-UX no admin was ever meant to run :)
> Snort (CVS checkout from today -- and all old versions as well) reports:
> Apr 7 11:34:50 stahlw06 snort: Incomplete Packet Fragments Discarded: 126.96.36.199 -> 188.8.131.52
> but I'm sure it's meant to be:
> 184.108.40.206 -> 220.127.116.11
> So the first two bytes of an IP seem to be swapped with the last two bytes.
> ralf.hildebrandt at ...821... innominate AG
> System Engineer Don't be afraid of what you see -
> Diplom-Informatiker be afraid of what you don't see!
> tel: +49.(0)7000.POSTFIX fax: +49.(0)30.308806-698
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> Snort-users list archive:
More information about the Snort-users