Spade Joint Prob table output

[Wilson Farrell <wfarrell () bbn com>]

I was hoping someone could tell me a little about how the joint 
probability table for Spade is created.  I am assuming that spade just 
counts SYN packets.  If it sees a SYN packet, it is counted even if 
there is no SYN ACK.  So if a firewall is preventing a connection, the 
connection attempt will still be accounted for in the probability table.


Thanks,
wilson

--

#+#+#+#+#+#+#+#+#+#+#+#+
+ Wilson Farrell       #
#+#+#+#+#+#+#+#+#+#+#+#+
+ Systems Engineer     #
# BBN Technologies     +
+ An L.L.C. of Verizon #
# Information Security +
+ wfarrell () bbn com     #
# VOX (617)873-5283    +
+ FAX (617)873-4086    #
#+#+#+#+#+#+#+#+#+#+#+#+


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users