Snort mailing list archives

Interesting problem with Snort 2.1.0 today --


From: sam () neuroflux com
Date: Tue, 9 Mar 2004 13:59:27 -0700 (MST)

We had an interesting problem with Snort today..  Basically what happened
was that the process started matching every single packet as the MS-SQL
Worm Propegation attempt (sid: 2003).

It was matching packets in TCP, UDP, ports 25, 80, etc. etc.  Very strange.

Restarting Snort solved the problem, but, it doesn't do much for our
comfort level.

Has anyone else experienced this?

Thanks,
Sam


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: