[Snort-users] weird message in logs

Richard rwitt9 at ...530...
Fri Sep 21 19:25:04 EDT 2001


i recently upgraded to the snort 1.8.1 relase and now in my logs i keep
getting a weird message like


snort[25617]: MISC IP Reserved bit set [1:523:1] :  YYY.YYY.YYY.YYY ->
XXX.XXX.XXX.XXX

everytime i connect to anything .. including a webpage or just even
checking my email. The XXX is my ip and the YYY is the site i am
connecting to. What does this mean? is there something i can do .. other
than commenting out that rule.. that i can change or reconfigure?

many thanks in advance

rich





More information about the Snort-users mailing list