[Snort-users] Snort Alert Help for Rule : SID=2

Naman Latif naman.latif at ...10264...
Thu Dec 4 08:40:07 EST 2003


Hi,
Can someone explain this alert ?

++++++++
spp_stream4: Evasive Reset Packet
++++++++

Snort SID for as stored in database is 2, however I couldn't find any
documentation for this.
Does it mean a TCP packet with RESET Flag set ?
How can I disable this alert ?

Regards \\ Naman




More information about the Snort-users mailing list