[Snort-users] frag3: Fragmentation overlap

Paul Schmehl pauls at ...6838...
Mon Sep 25 13:02:57 EDT 2006


Can anyone explain exactly what this alert means?  (Other than the fact 
that the packets are being fragmented and there is overlap?)  Is it the 
prelude to an attack?  A misconfigured host?

Paul Schmehl (pauls at ...6838...)
Adjunct Information Security Officer
The University of Texas at Dallas
http://www.utdallas.edu/ir/security/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pkcs7-signature
Size: 4085 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20060925/e26f7524/attachment.bin>


More information about the Snort-users mailing list