[Snort-users] Linux Kernel 2.4

Martin Roesch roesch at ...421...
Fri Jan 12 14:51:01 EST 2001

Yeah, we need to add ECN "detection" to the portscan detector and the
decoders so we can avoid this problem.  BTW, thanks for the article, it
was very informative.


Martin Roesch
roesch at ...421...

> "Miller, Toby" wrote:
> All,
> I published a paper back in november about ECN and it's impact on
> Intrusion Detection. This paper can be found at:
> http://www.sans.org/y2k/ecn.htm
> and
> http://www.securityfocus.com/focus/ids/articles/ECN.html
> Any comments are welcomed.
>                         Toby

More information about the Snort-users mailing list