Snort mailing list archives
Re: smb alerts not working
From: Tony Lill <ajlill () ajlc waterloo on ca>
Date: Sun, 22 Jul 2001 23:59:33 EDT
I just found a bug in smb alerts trying to figure out another problem. The SmbAlert function in log.c, uses otn_tmp without checking if it's NULL! otn_tmp should be NULL for anomoly alerts. If you configure smb alerts in the config file, that checks the value before using it. -- Tony Lill, Tony.Lill () AJLC Waterloo ON CA President, A. J. Lill Consultants fax/data (519) 650 3571 539 Grand Valley Dr., Cambridge, Ont. N3H 2S2 (519) 241 2461 --------------- http://www.ajlc.waterloo.on.ca/ ---------------- "Welcome to All Things UNIX, where if it's not UNIX, it's CRAP!" _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: http://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- smb alerts not working maillists (Jul 21)
- <Possible follow-ups>
- Re: smb alerts not working Tony Lill (Jul 22)