stream4: possible EVASIVE RST <-> EVASIVE RST

[Steffen "Maetzky (extern)" <Steffen.Maetzky () gedas de>]

Hello,

1) I'd like to know how stream4 decides which events are possible
EVASIVE RST or EVASIVE RST.

I think that it depends to the flags which are set.
Does anyone know which flags are generating this events?

2) Are there known uncritical processes which are creating these alerts?

Thanks in advance,

Steffen



-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users