Snort mailing list archives
Re: Reconstruction of TCP packets
From: Dirk Geschke <Dirk_Geschke () genua de>
Date: Wed, 31 Mar 2004 09:25:59 +0200
Hi Rajesh,
Eventhough I am enabling stream4_reassemble it is not doing so.
did you configure stream4 the right way? Without any options a default list of values is loaded. Maybe the required port is not part of the default reassembly scheme? For example the default ports are: # ports [list] - use the space separated list of ports in [list], "all" # will turn on reassembly for all ports, "default" will turn # on reassembly for ports 21, 23, 25, 53, 80, 143, 110, 111 # and 513 Best regards Dirk ------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Reconstruction of TCP packets Rajesh Joseph (Mar 29)
- Re: Reconstruction of TCP packets Dirk Geschke (Mar 29)
- Re: Reconstruction of TCP packets Rajesh Joseph (Mar 29)
- Re: Reconstruction of TCP packets Jason Haar (Mar 29)
- Re: Reconstruction of TCP packets Rajesh Joseph (Mar 30)
- Re: Reconstruction of TCP packets Dirk Geschke (Mar 30)
- Re: Reconstruction of TCP packets Rajesh Joseph (Mar 31)
- Re: Reconstruction of TCP packets Dirk Geschke (Mar 31)
- Re: Reconstruction of TCP packets Rajesh Joseph (Mar 29)
- Re: Reconstruction of TCP packets Dirk Geschke (Mar 29)