[Snort-users] Hmmm, events with sig_id=1

Steven P. Donegan steve at ...3789...
Mon Nov 25 09:38:26 EST 2002

On snort 1.9.0 I am seeing occasional events which have a sig_id of 1, there
does not appear to be a rule with that sig_id and the data in the event
appears to be garbage. Has anyone else seen this?

More information about the Snort-users mailing list