[Snort-users] Rule port question

honeybadger at ...15978... honeybadger at ...15978...
Wed Jan 2 16:20:03 EST 2013


Has anyone seen this? 

Rule: alert any 6667 - > any any (msg.... Etc

But the alert is triggering on any one with a port 46667 for some reason. 


Anyone see this, any solution? 





-- 
Sent from my Android phone with K-9 Mail. Please excuse my brevity.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20130102/4fde4146/attachment.html>


More information about the Snort-users mailing list