[prev in list] [next in list] [prev in thread] [next in thread] 

List:       snort-users
Subject:    Re: [snort] not detected vulneriabilities
From:       CyberPsychotic <fygrave () tigerteam ! net>
Date:       1999-08-28 8:29:59
[Download RAW message or body]

~ Hi Fyodor,
~      Snort missed all of these scans? 


nah, only some of them. I think the dude was able to trick snort in some way
(fragmented packs? overload? packets with corrupted checksums?) to miss some
pieces. I haven't yet looked how snort performs tcp packet reassembly, but I
guess it might be the caues..

[prev in list] [next in list] [prev in thread] [next in thread]