[Snort-users] Problems with spp_stream4.

Emilio Mira emial at ...4389...
Mon Jul 15 11:20:05 EDT 2002


> Are you keeping the session open and then stopping snort? Or are you
> closing telnet down and then stopping snort

I've tryed both, but doesn't work. I've tryed with this too:

preprocessor stream4_reassemble: both, ports all

but, doesn't.

If in the rule I change '->' by '<>', then when I type 'hello' on host B
via telnet, the response:

bash: hello: command not found

generates an alert with source B.

--
Emilio Mira






More information about the Snort-users mailing list