[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[ISSForum] Pam.tcpprobe.issueID.portN filter



Hi,
Does anybody know if it's possible to create event filters for
user-defined TCP_Probe_* signatures?
I have a lot of signatures created by pam.tcpprobe.<issueID>.<portN>
param. Is event filter configured for that signatures working? Now I'm
not sure, because sometimes it seems that filters are working and
sometimes not.

Thanks.

---
Best regards, Sergey V. Soldatov.
Information security department.


_______________________________________________
ISSForum mailing list
ISSForum@xxxxxxx

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@xxxxxxx

The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.