[Snort-users] Signature for this?

Erek Adams erek at ...577...
Sun Sep 8 11:19:02 EDT 2002


On 8 Sep 2002, Frank Knobbe wrote:

> Yeah, I was afraid you guys would say that...
>
> Wasn't there someone working on a DNS pre-processor? Maybe that would
> catch it (overly long DNS responses, etc.)

Sure is!

http://www.snort.org/dl/contrib/patches/spp_dns_session/

:)

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net





More information about the Snort-users mailing list