[Snort-users] TTL EVASION

Sheahan, Paul (PCLN-NW) Paul.Sheahan at ...2218...
Thu Aug 1 08:06:34 EDT 2002


I just upgraded to Snort 1.8.7 and running on RHLinux 7.0

I'm getting tons of these alerts - "TTL EVASION (reassemble) detection".
What do these indicate and how can I turn this off?


More information about the Snort-users mailing list