Snort mailing list archives
Re: Problems with spp_stream4.
From: Emilio Mira <emial () alumni uv es>
Date: Mon, 15 Jul 2002 20:19:19 +0200 (CEST)
Are you keeping the session open and then stopping snort? Or are you closing telnet down and then stopping snort
I've tryed both, but doesn't work. I've tryed with this too: preprocessor stream4_reassemble: both, ports all but, doesn't. If in the rule I change '->' by '<>', then when I type 'hello' on host B via telnet, the response: bash: hello: command not found generates an alert with source B. -- Emilio Mira ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Problems with spp_stream4. Emilio Mira (Jul 14)
- Re: Problems with spp_stream4. Chris Green (Jul 15)
- Re: Problems with spp_stream4. Emilio Mira (Jul 15)
- Re: Problems with spp_stream4. Joe McAlerney (Jul 15)
- Re: Problems with spp_stream4. Chris Green (Jul 15)