[Snort-users] Alert explanations

Sean Brown sblinux at ...9344...
Sun Aug 8 19:51:01 EDT 2004


Over the past few days, I'm seeing a lot of 'Possible RETRANSMISSION 
detection' and 'Overlapping new fragment (probable fragroute)' showing up. I 
looked for a good explanation of what might be going on, but nothing really 
jumped out, so are there any good sites that I could go to to read up on 
these things?

Thanks
-Sean Brown




More information about the Snort-users mailing list