Snort mailing list archives

Re: (snort_decoder): Short UDP packet, length field > payload length


From: Jason Brvenik <jason.brvenik () sourcefire com>
Date: Thu, 07 Jul 2005 14:42:30 -0400

It means that the system saw a UDP packet which indicated it's length was greater than the actual payload. This should not happen and is generally a bad thing.

Flora.francesco wrote:
what kind of alert is that?
thanks a lot


-------------------------------------------------------
This SF.Net email is sponsored by the 'Do More With Dual!' webinar happening
July 14 at 8am PDT/11am EDT. We invite you to explore the latest in dual
core and dual graphics technology at this free one hour event hosted by HP,
AMD, and NVIDIA.  To register visit http://www.hp.com/go/dualwebinar
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: