Snort mailing list archives
Re: have i been banned
From: Matt Kettler <mkettler () evi-inc com>
Date: Fri, 05 Mar 2004 11:31:27 -0500
At 11:06 PM 3/4/2004, Fred McFeeters wrote:
No one ever answers any of my messages have I been banned
Why would you be "banned"?In the past several weeks, you only seem to have made one post which would warrant an answer. And that was only posted this morning.
I personally have no specific insight into your problems in: "[Snort-users] ANOMALOUS HTTP SERVER ON UNDEFINED HTTP PORT"
However, I might suggest that you check for packet drops by sending snort a SIGUSR1.. if you're dropping packets, snort can become confused about the nature of a connection's data flow and can cause weird FPs as snort becomes unsure of which host is a client, and which is a server.
------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- have i been banned Fred McFeeters (Mar 04)
- Re: have i been banned twig les (Mar 04)
- Re: have i been banned Matt Kettler (Mar 05)