OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Chris Green (cmg_at_sourcefire.com)
Date: Mon Jan 27 2003 - 15:39:50 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Nils Ulltveit-Moe <numproseq.no> writes:

    > Hi
    >
    > Have any of you experienced "payload mixup" with Snort 1.9.0? In our
    > case, it is the "ICMP redirect host" rule (SID 472) that seems to
    > display strange payload. In the three cases below, it seems that
    > telnet or HTTP sessions are mixed with HTTP traffic from another
    > session as the content of the ICMP message:
    >

    It should be fixed in HEAD CVS. Later, I'll work on back porting the
    fixes. 

    -- 
Chris Green <cmgsourcefire.com>
Eschew obfuscation.

    -------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users