[Snort-users] bug in snort 2.0.1?

Andrew R. Baker andrewb at ...950...
Thu Aug 7 11:27:09 EDT 2003


Luo, Philip wrote:
> I am getting tons of these alerts like
> 
> (snort_decoder): Short UDP packet, length field > payload length
> 
> from desktops to domain controllers. It looks like a bug!

Do you have any of the packets from these alerts that can be examined to 
verify if there is a bug or not?  This particular alert is trigerred 
when the UDP length field specifies more bytes than are available in the 
  actual payload.

-A





More information about the Snort-users mailing list