[Snort-users] spp_stream4: TTL EVASION (reassemble) detection

Pedro Tedeschi pedro.tedeschi at ...6753...
Fri Sep 20 07:32:01 EDT 2002


Hi, whats means this rule? 
"spp_stream4: TTL EVASION (reassemble) detection"

I didn't find  this one in the rules path, and i'm recieve more than 56000 attacks about this rule ...

Is this rule are important? If not, i would like to know, how i can remove this rule ...


Thanks in advance


Cheers,

Pedro Tedeschi
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20020920/40a547ef/attachment.html>


More information about the Snort-users mailing list