logo
bgImage
http://www.winsnort.com


Welcome to the home of WinIDS - Windows Intrusion Detection System!
header

Thank you for visiting WINSNORT.com

FAQ  •  Search  •  Register  •  Log in to check your private messages
Log in

DISCARD PACKETS
WINSNORT.com Forum Index » WinSnort.com General » Rule signatures for Snort - Not CORE rule relaited!
Post new topic   Reply to topic
View previous topic Printable version Log in to check your private messages View next topic
Author Message
hanieh83Offline
Post subject: DISCARD PACKETS  PostPosted: Oct 14, 2009 - 05:38 PM



Joined: Oct 14, 2009
Malaysia
Posts: 1

Status: Offline
Dear All
I need ur help,is anybody knows why snort got ip4disc for the packet?? why discard all the ipvdisc packet? how can i prevent discarding??

Pleaseeeeeeeeeeeeeeeeeee help
 
 View user's profile Send private message  
Reply with quote Back to top
MorpheusOffline
Post subject: RE: DISCARD PACKETS  PostPosted: Oct 15, 2009 - 02:49 AM
Site Admin


Joined: Sep 04, 2003
East Coast - USA
Posts: 1416
Location: East Coast - USA
Status: Offline
Most likely the packet is to large to be logged. I don't think these packets are ran through the rules. The -P option has a default, and you will need to increase that value using the -P switch on the run line?

Let us know if it works.

_________________
Best regards,
Morpheus...

WINSNORT.com Management
 
 View user's profile Send private message Visit poster's website MSN Messenger  
Reply with quote Back to top
Display posts from previous:     
Jump to:  
All times are GMT -5 Hours
Post new topic   Reply to topic
View previous topic Printable version Log in to check your private messages View next topic
 WINSNORT.com Forum Index » WinSnort.com General »  Rule signatures for Snort - Not CORE rule relaited!

Powered by PNphpBB2 © 2003-2009. The PNphpBB2 Team
www.eventloganalyzer.com