[Snort-users] Alerts problem

Santi Benito benisoroa at ...11827...
Thu May 11 09:09:03 EDT 2006


Hi again snorters, I have a huge problem that I don't understand.
How is possible that replaying the same file at 20 Mb/s the number of
alerts is 12332 and replaying the file at 50Mb/s the alerts are
12675.At 100 Mb/s the rules reach 12805 and this number maintains like
that until the 350 Mb/s.

 I am using only the p2p.rules rules and I have added the
p2p_bleeding.rules but I am using only the rules for
eDonkey,cancelling the rest.

Could anyone respond me to this X-file situation?
thanks




More information about the Snort-users mailing list