Re: spp_stream4: EVASIVE RST detection

[Ralf Hildebrandt <Ralf.Hildebrandt () innominate com>]

On Wed, Jul 11, 2001 at 09:50:32AM +0200, Ralf Hildebrandt wrote:
> OK, what is "spp_stream4: EVASIVE RST detection" ? And why is it
> cluttering my log?
>
> Between 18:16:55 and 09:44:11 I got 136 of these alerts. What exactly
> triggers it?

Or is there any way to disable that particular type of alert from the
stream4 preprocessor?

-- 
ralf.hildebrandt () innominate com                            innominate AG
Technical Consultant                   Don't be afraid of what you see -
Diplom-Informatiker                     be afraid of what you don't see!
tel: +49.(0)7000.POSTFIX                        fax: +49.(0)30.308806-77


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users