[Asterisk-Users] Truncated Tcp Options?

Rich Adamson radamson at routers.com
Mon Mar 15 14:14:10 MST 2004


Can someone help me understand the following alert? (snort v2.1, current rules)

snort: [116:55:1] (snort_decoder): Truncated Tcp Options {TCP} 215.144.24.31:80 -> 
10.10.91.29:1354

This is from outside -> inside (a response packet). Seems thus far to only
be associated with one workstation (or mabe a single remoe site).

Not sure how to deal with this. Suggestions? 

Rich







More information about the asterisk-users mailing list