[Snort-users] snort_decoder

Erick Mechler emechler at ...7719...
Thu May 1 17:44:49 EDT 2003


:: [**] [116:56:1] (snort_decoder): T/TCP Detected [**]
:: 05/01-15:01:41.513461 205.229.151.150:0 -> 64.1.201.147:0
:: TCP TTL:49 TOS:0x0 ID:50137 IpLen:20 DgmLen:68
:: ******S* Seq: 0x839CCEA2  Ack: 0x0  Win: 0x4000  TcpLen: 48
:: TCP Options (9) => MSS: 512 NOP WS: 0 NOP NOP TS: 9875582 0 NOP 
:: TCP Options => NOP CCNEW: 923253 

Check the list archives.  This question has been answered multiple times.

--Erick




More information about the Snort-users mailing list