Snort mailing list archives

Re: smb alerts not working


From: Tony Lill <ajlill () ajlc waterloo on ca>
Date: Sun, 22 Jul 2001 23:59:33 EDT

I just found a bug in smb alerts trying to figure out another
problem. The SmbAlert function in log.c, uses otn_tmp without checking
if it's NULL! otn_tmp should be NULL for anomoly alerts. If you
configure smb alerts in the config file, that checks the value before
using it.
--
Tony Lill,                         Tony.Lill () AJLC Waterloo ON CA
President, A. J. Lill Consultants        fax/data (519) 650 3571
539 Grand Valley Dr., Cambridge, Ont. N3H 2S2     (519) 241 2461
--------------- http://www.ajlc.waterloo.on.ca/ ----------------
"Welcome to All Things UNIX, where if it's not UNIX, it's CRAP!"

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: