Re: false alarm with snort 2.0, why?

[Matt Kettler <mkettler () evi-inc com>]

You included some details of the packet, but you skipped including any 
details of the alert.

Which rule or preprocessor is generating the alert/log?

did you start snort with the -o parameter?

At 08:31 PM 4/28/2003 +0200, Holger Marzen wrote:
> Snort 2.0 on Linux 2.2.16
> -------------------------
>
> I defined "regular" traffic with pass rules. Every other traffic goes to
> a logfile.



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users