Open Information Security Foundation

10/24/2012

11:26 AM Suricata Feature #610: track by_src exluding port

Hm, ok i think you are right but then i hit another problem which i maybe better post on the mailinglist?!
the fol... Michael H

11:06 AM Suricata Feature #610: track by_src exluding port

Ok, but destination port is? The problem is an udp flood with random source and random destination ports. Michael H

10:58 AM Suricata Feature #610 (Closed): track by_src exluding port

Hello,
for some of my rules it might be important to track by_src excluding the src port which does not matter.
M... Michael H