[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Firestorm and Fragmentation
Yes,
snort and firestorm configured with frag timeout 60s.
and I don't no with prelude...
Gianni Tedesco wrote:
> On Wed, 2003-03-26 at 11:29, rmkml wrote:
> > but firestorm event frag ...
> > and snort not alarm/log this ! (snort 191b233)
> > and prelude not view and not log ...
>
> What is the ipfrag timeout set to in firestorm? The default config sets
> it to 30 seconds I think (although in the code the default is 60),
> whereas snort and prelude are set to 60 by default (if i remember
> correctly).
>
> --
> // Gianni Tedesco (gianni at scaramanga dot co dot uk)
> lynx --source www.scaramanga.co.uk/gianni-at-ecsc.asc | gpg --import
> 8646BE7D: 6D9F 2287 870E A2C9 8F60 3A3C 91B5 7669 8646 BE7D
>
> ------------------------------------------------------------------------
> Name: signature.asc
> signature.asc Type: application/pgp-signature
> Description: This is a digitally signed message part