[Snort-users] [**] MISC source port 53 to <1023 [**]

Ian Campbell ianc at ...1500...
Wed Mar 14 19:30:21 EST 2001


Hello yet again,

Can anyone give me more info on this particular rule or the details of any
exploits it's supposed to catch?

Alot of the rules give Arachnid IDS #'s for references, but this particular
one doesn't, and guess what? It's generating about 99% of my alerts thus
far. Any insight would be appreciated,

Ian




More information about the Snort-users mailing list