[Snort-users] snort decoder WARNING: TCP Data Offset is less than 5

Peter Van Eeckhoutte peter.ve at ...13059...
Mon Feb 21 07:12:07 EST 2005


Hi all,
 
I'm running a portscan against my boxes (nmap, with the fragmentation flag
enabled); and I'm getting a lot (thousands and thousands) of Snort alerts :
WARNING: TCP Data Offset is less than 5
 
This event doesn''t seem to be rule triggered, so I'd like to know how I can
turn off this event
 
Any suggestions/help is greatly appreciated
 
P
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20050221/d5d362d6/attachment.html>


More information about the Snort-users mailing list