Snort mailing list archives
Strange..
From: "Marc Hering" <mhering () reval com>
Date: Fri, 18 Mar 2005 17:06:00 -0500
Hey, Ever since they shut down the direct snort lookup from ACID my life has sucked.... Anyway, I am getting LOTS of these errors. (spp_stream4) possible EVASIVE RST detection Are they normal *(We are an ASP, so people hit our database via the website all day long)* and if so where would this rule be soI can comment it out? Thanks! (Also how can I fix the ACID rule lookup?) Thaks Marc Hering Manager of Network Operations Reval 100 Broadway 22nd Floor New York, NY 10005 Direct: 212-901-9710 Fax: 212-901-9797 www.reval.com <http://www.reval.com/>
Current thread:
- Strange.. Marc Hering (Mar 18)
- <Possible follow-ups>
- RE: Strange.. Briggs, Bruce (Mar 18)