[Snort-users] Snort3: no rule for "bad cksum"

Meridoff oagvozd at gmail.com
Thu Mar 28 06:58:34 EDT 2019


ср, 27 мар. 2019 г. в 12:26, Meridoff <oagvozd at gmail.com>:

> Hello, I 've set up in network {}  table all options concerning cksum
> evaluating and bad cksum dropping. All is ok - bad cksum packet is not
> forwarded through snort.
>
> But now messeges in log about it. And I've not found any rule for bad
> cksum in builtin rules.
>

Misprinted: "But no messages in log about it"


> Why? And how I can recognize that packet with bad cksum was
> alerted/dropped and so on ?
>
> Thanks!
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20190328/c698b33e/attachment.html>


More information about the Snort-users mailing list