Snort mailing list archives
How can I Verify That I am performing UDP de-fragging?
From: "Vadim Pushkin" <wiskbroom () hotmail com>
Date: Fri, 14 Jun 2002 19:27:21 +0000
My feelings are that I am not, is there any rule to specifically for udp and udp defragmentation? I have both a SHADOW sensor as well as a snort sensor and my SHADOW sensor shows more traffic than my snort sensor does. I would love to stop using the SHADOW box, but I must first resolve this puzzle. Thank you all, Vadim _________________________________________________________________ Chat with friends online, try MSN Messenger: http://messenger.msn.com _______________________________________________________________ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas - http://devcon.sprintpcs.com/adp/index.cfm?source=osdntextlink _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- How can I Verify That I am performing UDP de-fragging? Vadim Pushkin (Jun 14)