[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[ISSForum] Pam.tcpprobe.issueID.portN filter

Does anybody know if it's possible to create event filters for
user-defined TCP_Probe_* signatures?
I have a lot of signatures created by pam.tcpprobe.<issueID>.<portN>
param. Is event filter configured for that signatures working? Now I'm
not sure, because sometimes it seems that filters are working and
sometimes not.


Best regards, Sergey V. Soldatov.
Information security department.

ISSForum mailing list

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@xxxxxxx

The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.