[Snort-users] Signature Problem

wkitty42 at windstream.net wkitty42 at windstream.net
Fri Sep 8 20:07:20 EDT 2017


On 09/08/2017 06:44 PM, Kai Chan via Snort-users wrote:
> As I said before, I get ICMP alerts, but if I try to browse a webpage or do a
>  DNS query, it still won't alert.  Tcpdump seems to work fine on the
> container, so I don't understand why Snort wouldn't.  Did I forget to do
> something?

try adding "-k none" to your command line to turn off packet checksums...

please keep your response(s) on the list...

-- 
  NOTE: No off-list assistance is given without prior approval.
        *Please keep mailing list traffic on the list unless*
        *a signed and pre-paid contract is in effect with us.*



More information about the Snort-users mailing list