[Oisf-users] Fwd: where are my missing packets ?

Travel Factory S.r.l. mc8647 at mclink.it
Thu Feb 23 08:52:38 UTC 2012


rule-files:
  - file-identify.rules
  - cdd.rules   <-- these are 5 rules I wrote, to see if the traffic 
flows...
  - exploit.rules
  - policy.rules
  - smtp.rules
  - specific-threats.rules
  - web-client.rules
  - emerging-web_client.rules


My goal is to replicate this test:
http://www.aldeid.com/wiki/Suricata-vs-snort/Test-cases/Client-side-attacks

but since I have a lot of missing packets...


I'm now remming all rules except cdd.rules and try again.



More information about the Oisf-users mailing list