OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Chris Green (cmg_at_sourcefire.com)
Date: Mon Jan 27 2003 - 15:39:50 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Nils Ulltveit-Moe <numproseq.no> writes:

    > Hi
    >
    > Have any of you experienced "payload mixup" with Snort 1.9.0? In our
    > case, it is the "ICMP redirect host" rule (SID 472) that seems to
    > display strange payload. In the three cases below, it seems that
    > telnet or HTTP sessions are mixed with HTTP traffic from another
    > session as the content of the ICMP message:
    >

    It should be fixed in HEAD CVS. Later, I'll work on back porting the
    fixes.

    -- 
    Chris Green <cmgsourcefire.com>
    Eschew obfuscation.
    

    ------------------------------------------------------- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com _______________________________________________ Snort-users mailing list Snort-userslists.sourceforge.net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users