[Snort-users] Seeing TCP keepalives

Philip Mak pmak at ...10118...
Fri Sep 19 06:47:02 EDT 2003


I'm using the following command line:

snort -v -d -C src host mush.aaanime.net and src port 6666

Should this be displaying any TCP keepalives that are sent from
mush.aaanime.net 6666? Because it's not displaying keepalives, but I'm
not sure whether that's because (1) there are no keepalives being
sent, or (2) there are keepalives being sent but it's not displaying
them.




More information about the Snort-users mailing list