Snort mailing list archives

snort decoder WARNING: TCP Data Offset is less than 5


From: "Peter Van Eeckhoutte" <peter.ve () telenet be>
Date: Fri, 18 Feb 2005 12:13:54 +0100

Hi all,
 
I'm running a portscan against my boxes (nmap, with the fragmentation flag
enabled); and I'm getting a lot (thousands and thousands) of Snort alerts :
WARNING: TCP Data Offset is less than 5
 
This event doesn''t seem to be rule triggered, so I'd like to know how I can
turn off this event
 
Any suggestions/help is greatly appreciated
 
P

Current thread: