Snort mailing list archives

Re: have i been banned


From: Matt Kettler <mkettler () evi-inc com>
Date: Fri, 05 Mar 2004 11:31:27 -0500

At 11:06 PM 3/4/2004, Fred McFeeters wrote:
No one ever answers any of my messages have I been banned

Why would you be "banned"?

In the past several weeks, you only seem to have made one post which would warrant an answer. And that was only posted this morning.

I personally have no specific insight into your problems in: "[Snort-users] ANOMALOUS HTTP SERVER ON UNDEFINED HTTP PORT"

However, I might suggest that you check for packet drops by sending snort a SIGUSR1.. if you're dropping packets, snort can become confused about the nature of a connection's data flow and can cause weird FPs as snort becomes unsure of which host is a client, and which is a server.






-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: