Am 2004-01-04 12:20:59, schrieb Duncan Sands: >Bad packet size? Anyway, I thought snort just checks your >logs for strange stuff. So anything it reports must already
No, snort ist listen on ppp0 (runing in promiscous mode) and it starts from /etc/ppp/ip-up.d/snort >have turned up in a log somewhere. Are you using a >firewall? Check if the firewall is dropping packets because >they have a strange packet size. only: iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE echo 1 > /proc/sys/net/ipv4/ip_forward iptables -P INPUT DROP Not more curently It works quiet well, exept wit wget and www.mazika.com The mp3 I try to download are coming from CGI's and is it possibel, that the CGI detect weget and sends fals Packet-Size Infos ? I cn download the mp3 with mozilla correctly, but downloading with wget makes all mp3 the same size (But I can play it !!!) They have all somthing like 6.137.130 Bytes But the real-sizes are between 4.200.000 and 5.600.000 Bytes >Ciao, > >Duncan. Greetings Michelle -- Registered Linux-User #280138 with the Linux Counter, http://counter.li.org. Liste de diffusion modem ALCATEL SpeedTouch USB Pour se d�sinscrire : mailto:[EMAIL PROTECTED]
