On Fri, 2003-03-21 at 16:25, rmkml wrote: > ok join tcpdump. > first session not view with firestorm/prelude, > second session view with all firestorm/prelude/snort. > > I use snort 191b233, and firestorm 053pre. Oops, I should have mentioned, can you do the tcpdump again with '-s 65535' ? The packets get truncated to 64 bytes otherwise. thanks. -- // Gianni Tedesco (gianni at scaramanga dot co dot uk) lynx --source www.scaramanga.co.uk/gianni-at-ecsc.asc | gpg --import 8646BE7D: 6D9F 2287 870E A2C9 8F60 3A3C 91B5 7669 8646 BE7D
Attachment:
signature.asc
Description: This is a digitally signed message part