[Oisf-devel] FN with ip proto GRE on suricata today git and v0.9.1

rmkml rmkml at free.fr
Fri Jun 18 13:31:15 UTC 2010


and alert fire of course with snort.
Regards
Rmkml


On Fri, 18 Jun 2010, rmkml wrote:

> Hi,
> Im test suricata with GRE protocol with example sig:
> alert ip any any -> any any (msg:"GRE suricata test"; ip_proto:47; 
> classtype:attempted-admin; sid:9431292; rev:1; )
> but no alert fired.
> It's a known pb?
> If not, Im open a new ticket...
> Regards
> Rmkml
>



More information about the Oisf-devel mailing list