[Snort-users] Snort Alert Help for Rule : SID=2

Naman Latif naman.latif at ...10264...
Thu Dec 4 08:40:07 EST 2003

Can someone explain this alert ?

spp_stream4: Evasive Reset Packet

Snort SID for as stored in database is 2, however I couldn't find any
documentation for this.
Does it mean a TCP packet with RESET Flag set ?
How can I disable this alert ?

Regards \\ Naman

More information about the Snort-users mailing list