Re: Firestorm and Fragmentation

[rmkml <rmkml@xxxxxxxxxx>]

ok check firestorm frag,

but if you receive only fragment and not packet frag start/end,

I happy firestorm event this ...

Regard.



Gianni Tedesco wrote:

> On Wed, 2003-03-26 at 13:41, rmkml wrote:
> > Yes,
> > snort and firestorm configured with frag timeout 60s.
> > and I don't no with prelude...
>
> Maybe they just don't alert on those events? Not sure. I'll look at the
> capture and see if the check is buggy though.
>
> --
> // Gianni Tedesco (gianni at scaramanga dot co dot uk)
> lynx --source www.scaramanga.co.uk/gianni-at-ecsc.asc | gpg --import
> 8646BE7D: 6D9F 2287 870E A2C9 8F60 3A3C 91B5 7669 8646 BE7D
>
>   ------------------------------------------------------------------------
>                        Name: signature.asc
>    signature.asc       Type: application/pgp-signature
>                 Description: This is a digitally signed message part