[Snort-users] Problems with spp_stream4.
emial at ...4389...
Mon Jul 15 11:20:05 EDT 2002
> Are you keeping the session open and then stopping snort? Or are you
> closing telnet down and then stopping snort
I've tryed both, but doesn't work. I've tryed with this too:
preprocessor stream4_reassemble: both, ports all
If in the rule I change '->' by '<>', then when I type 'hello' on host B
via telnet, the response:
bash: hello: command not found
generates an alert with source B.
More information about the Snort-users