[Snort-users] stream4 and min_ttl option

Cloppert, Michael Michael.Cloppert at ...5884...
Tue Oct 29 13:12:04 EST 2002


I have the following line in my snort.conf:

preprocessor stream4: min_ttl $MIN_TTL,detect_scans,disable_evasion_alerts

And when I try to start snort, I get the following error:

ERROR: Unknown stream4 options: min_ttl
Fatal Error, Quitting..

I thought this was available... everything I can find acknowledges it as a
legitimate switch.  Anyone have any ideas or has anyone else seen this?

Thanks in advance,

Mike




More information about the Snort-users mailing list