Snort mailing list archives
BPF for ECN Bits
From: "Erickson Brent W KPWA" <erickson () kpt nuwc navy mil>
Date: Thu, 24 May 2001 12:03:57 -0700
Goodmorning, Does anyone have a working example of a bpf filter for ignoring ECN bits ? I have searched the Snort forum and could not find anything although I remember the topic being discussed in the past. I am trying the have the Snort portscan pre-processor ignore SMTP connects with the ecn or reserved bits set. Or ignore all ecn or reserved bits. Thank you for your help, Brent Erickson _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: http://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- BPF for ECN Bits Erickson Brent W KPWA (May 24)
- Re: BPF for ECN Bits Joe McAlerney (May 24)
- Re: BPF for ECN Bits Erik Fichtner (May 24)
- Re: BPF for ECN Bits Max Vision (May 24)
- Re: BPF for ECN Bits Erik Fichtner (May 24)
- Re: BPF for ECN Bits Joe McAlerney (May 24)