[Snort-users] A question on flows with pcaps
jlay at ...13475...
Wed Aug 8 15:53:56 EDT 2012
On 2012-08-08 11:16, Will Metcalf wrote:
> If you leave flow:established,to_client; and pass "-k none" as a
> command line option does it fire? If so you probably need to disable
> checksum offloading on your nic...
Yea that's TOTALLY it...thanks Will!
More information about the Snort-users