Snort mailing list archives
snort decoder
From: "/dev/null" <dev.null () BeginThread com>
Date: Thu, 1 May 2003 12:43:32 -0500
I just started running snort yesterday and have had some success finding
various messages and what they mean. This is one that I can't seem to find
any info on, can someone please explain or point me to the place where I can
look this one up? I can't find it in the SID-lookup tool.
May 1 09:05:00 ALPHA snort: [116:56:1] (snort_decoder): T/TCP Detected
{TCP} 207.61.47.34:0 -> 12.222.161.123:0
Thanks!
-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- RE: Promiscuous interface hacks? Slighter, Tim (May 01)
- snort decoder /dev/null (May 01)
- <Possible follow-ups>
- Re: Promiscuous interface hacks? Carl (May 02)
