Snort mailing list archives
stream4 alerts
From: Tobias von Koch <tvk () weltcharts de>
Date: Sat, 21 Jul 2001 13:13:00 +0200
hi, stream4 (1.8p1) generates lots of alerts like the following on one of my hosts: 07/21-12:39:11.129903 [**] [111:3:1] spp_stream4: Possible RETRANSMISSION detection [**] {TCP} 62.158.XXX.XXX:1023 -> host:22 07/21-12:39:27.349565 [**] [111:3:1] spp_stream4: Possible RETRANSMISSION detection [**] {TCP} 62.158.XXX.XXX:1027 -> host:6667 [...] Now my question: Is it possible to turn off some of the alerts stream4 is able to generate (without modifying the source :>)? I'm sure this alert isn't really one in my case, because both hosts are mine and they are ok (just doing SSH/IRC between them). tvk _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: http://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- stream4 alerts Tobias von Koch (Jul 22)