Snort mailing list archives
Re: (snort_decoder): Short UDP packet, length field > payload length
From: Jason Brvenik <jason.brvenik () sourcefire com>
Date: Thu, 07 Jul 2005 14:42:30 -0400
It means that the system saw a UDP packet which indicated it's length was greater than the actual payload. This should not happen and is generally a bad thing.
Flora.francesco wrote:
what kind of alert is that?thanks a lot
------------------------------------------------------- This SF.Net email is sponsored by the 'Do More With Dual!' webinar happening July 14 at 8am PDT/11am EDT. We invite you to explore the latest in dual core and dual graphics technology at this free one hour event hosted by HP, AMD, and NVIDIA. To register visit http://www.hp.com/go/dualwebinar _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- (snort_decoder): Short UDP packet, length field > payload length Flora.francesco (Jul 07)
- Re: (snort_decoder): Short UDP packet, length field > payload length Jason Brvenik (Jul 14)
- Re: (snort_decoder): Short UDP packet, length field > payload length Joel Esler (Jul 14)
- Re: (snort_decoder): Short UDP packet, length field > payload length Jason Brvenik (Jul 14)