Hosting Provided By

Re: [Snort-devel] new pb on snort v2 ? (icmp large packet)

From: Chris Green <cmg(at)sourcefire.com>
Date: Wed Apr 23 2003 - 13:30:05 EDT

Currently, create a different rule with dsize + itype for it or disable the icmp-info rules.

-- 
Chris Green 
This is my signature. There are many like it but this one is mine.


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-devel mailing list
Snort-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-devel

Received on Wed Apr 23 13:36:18 2003

This message: [ Message body ]
Next message: Chris Green: "Re: [Snort-devel] Bug Report: Solaris/Sparc + native compiler will not build"
Previous message: Erek Adams: "Re: [Snort-devel] check for promiscious mode needed ?"
In reply to rmkml: "Re: [Snort-devel] new pb on snort v2 ? (icmp large packet)"
Next in thread: rmkml: "Re: [Snort-devel] new pb on snort v2 ? (icmp large packet)"
Reply: rmkml: "Re: [Snort-devel] new pb on snort v2 ? (icmp large packet)"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ] [ By messages with attachments ]

This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 14:08:05 EDT