Re: Final Warning [ was: ECN is on! ]

On Tue, May 22, 2001 at 11:55:59AM -0500, Joe Barr wrote: > What is ECN? Is it the reason SNORT has started this lately: http://vger.kernel.org/ Follow the links, and you will get an exellent answer. > > Active System Attack Alerts > =-=-=-=-=-=-=-=-=-=-=-=-=-= > May 22 10:11:18 pooh sn

Re: Final Warning [ was: ECN is on! ]

What is ECN? Is it the reason SNORT has started this lately: Active System Attack Alerts =-=-=-=-=-=-=-=-=-=-=-=-=-= May 22 10:11:18 pooh snort: spp_portscan: PORTSCAN DETECTED from 199.183.24.194 (STEALTH) May 22 10:11:22 pooh snort: spp_portscan: portscan status from 199.183.24.194: 1 co

Re: Final Warning [ was: ECN is on! ]

Folks, don't speculate. You are late anyway. We just had ECN off for two hours, and all sites which didn't commit harakiri at their firewalls ("bad TCP frame from that address, I will place that source into dead list") now either got their message, or are having some long-term troubles