Snort mailing list archives

strem5 session hijacked produce a lot of alerts with lb firewalls


From: carlopmart <carlopmart () gmail com>
Date: Wed, 06 Apr 2011 13:41:11 +0200

Hi all,

  Is it possible to restrict (or adjust) the level of alerts produced by 
"check_session_hijacking" stream5 option when traffic through a cluster 
of firewalls in load balancing mode?

  If I change load balancing by standby mode (active-passive), there 
will be no alerts ...

Thanks.
-- 
CL Martinez
carlopmart {at} gmail {d0t} com

------------------------------------------------------------------------------
Xperia(TM) PLAY
It's a major breakthrough. An authentic gaming
smartphone on the nation's most reliable network.
And it wants your games.
http://p.sf.net/sfu/verizon-sfdev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: