Snort - the de facto standard for intrusion detection/prevention
next up previous contents
Next: Stream4 Up: Frag3 Previous: format   Contents


Frag 3 Alert Output

Frag3 is capable of detecting eight different types of anomalies. Its event output is packet-based so it will work with all output modes of Snort. Read the documentation in the doc/signatures directory with filenames that begin with ``123-'' for information on the different event types.



Steven Sturges 2006-12-08