On Mon, 2003-03-24 at 13:48, rmkml wrote: > ok, > You view one or two event ? > > because, first session (tcp port 34913) is not view by firestorm, > > and second session (tcp port 34914) is view by firestorm ... OK, weird problem with offset modifier. Hacked firestorm to be compatible with prelude and snort, but from what it seems offset:0 and offset:1 are supposed to be the same thing.... very odd. Anyway, now snort compatible... Get new code from cvs or web: http://www.scaramanga.co.uk/firestorm/firestorm-snapshot.tar.gz -- // Gianni Tedesco (gianni at scaramanga dot co dot uk) lynx --source www.scaramanga.co.uk/gianni-at-ecsc.asc | gpg --import 8646BE7D: 6D9F 2287 870E A2C9 8F60 3A3C 91B5 7669 8646 BE7D
Attachment:
signature.asc
Description: This is a digitally signed message part