On Wed, 2003-03-26 at 11:29, rmkml wrote: > but firestorm event frag ... > and snort not alarm/log this ! (snort 191b233) > and prelude not view and not log ... What is the ipfrag timeout set to in firestorm? The default config sets it to 30 seconds I think (although in the code the default is 60), whereas snort and prelude are set to 60 by default (if i remember correctly). -- // Gianni Tedesco (gianni at scaramanga dot co dot uk) lynx --source www.scaramanga.co.uk/gianni-at-ecsc.asc | gpg --import 8646BE7D: 6D9F 2287 870E A2C9 8F60 3A3C 91B5 7669 8646 BE7D
Attachment:
signature.asc
Description: This is a digitally signed message part