[Snort-users] STEALTH ACTIVITY (unknown) detection

Chris Green cmg at ...1935...
Thu Jul 31 08:41:19 EDT 2003


Meaning:
stream4's detect_scans option catch all case:

We got a flag combination on detect scans that wasn't thought about
when implementing that option. Since all detect_scans does is do in C
what scan.rules can do for you, disable the detect_scans option of
stream4.
-- 
Chris Green <cmg at ...1935...>
Eschew obfuscation.




More information about the Snort-users mailing list