Snort mailing list archives
excessive numbers of Possible RETRANSMISSION detected
From: diphen () agitation net
Date: Wed, 1 Aug 2001 11:25:58 -0700
I'm not too familiar with spp_stream4, and I'm seeing tons of the following messages. Anybody have tips on how to tune/fix it to dispose of them? Thanks. -gabe [**] [111:3:1] spp_stream4: Possible RETRANSMISSION detection [**] 08/01-11:19:35.684295 0:2:3B:0:3C:10 -> 0:D0:9:1E:BE:4 type:0x800 len:0x5EA 166.88.45.2:4522 -> x.x.x.x:25 TCP TTL:52 TOS:0x0 ID:22267 IpLen:20 DgmLen:1500 DF ***A**** Seq: 0x2732B27D Ack: 0xCB9B19C7 Win: 0x4470 TcpLen: 20 [**] [111:3:1] spp_stream4: Possible RETRANSMISSION detection [**] 08/01-11:19:36.986029 0:2:3B:0:3C:10 -> 0:D0:9:1E:BE:4 type:0x800 len:0x5EA 166.88.45.2:4522 -> x.x.x.x:25 TCP TTL:52 TOS:0x0 ID:22315 IpLen:20 DgmLen:1500 DF ***A**** Seq: 0x2732F139 Ack: 0xCB9B19C7 Win: 0x4470 TcpLen: 20 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: http://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- excessive numbers of Possible RETRANSMISSION detected diphen (Aug 01)
- Re: excessive numbers of Possible RETRANSMISSION detected Julia A. Case (Aug 01)
- Re: excessive numbers of Possible RETRANSMISSION detected Chris Green (Aug 01)
- Re: excessive numbers of Possible RETRANSMISSION detected diphen (Aug 01)
- Re: excessive numbers of Possible RETRANSMISSION detected Chris Green (Aug 01)
- Re: excessive numbers of Possible RETRANSMISSION detected diphen (Aug 01)
- Re: excessive numbers of Possible RETRANSMISSION detected diphen (Aug 01)