Snort mailing list archives

Re: mystery arp message


From: Jeff Nathan <jeff () snort org>
Date: Sun, 06 Oct 2002 19:24:56 -0700

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- --On Thursday, October 03, 2002 19:02:58 -0500 robin 
<mstubbs () facstaff wisc edu> wrote:

I got several messages from snort like this:
[112:3:1] Ethernet destination/ARP target address mismatch [**]
The problem being that I  would like to know something about the packet
such as what address it came from. Is there a version of snort where this
issue has been fixed? I think I'm using 1.87 Otherwise can someone
recommend another program that could detect the same kind of issue?
Thanks!

This is corrected in 1.9.

Please update. :)

- -Jeff

- --
http://www.snort.org/~jeff       (pgp key available)
"Great spirits have always encountered violent opposition from mediocre
minds."
- - Albert Einstein
    
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (OpenBSD)

iD8DBQE9oPB7Eqr8+Gkj0/0RAqJtAJ9XOwcAC+RsygYs1m4+YH53cLaWrACgmY+9
WF6HUdTBO8vTNFJ1vgH3gQo=
=BFoV
-----END PGP SIGNATURE-----



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: