Snort v2.9.14.0 Issues - (snort_decoder) WARNING: Not IPv4 datagram
Ron Jenkins via Snort-devel <[email protected]> Tue, 23 Jul 2019 15:30:58 +0000
| Newsgroups | gmane.comp.security.ids.snort.devel |
|---|---|
| Message-ID | <CY4PR13MB1686736A847C0A6337D8A4E3E1C70@CY4PR13MB1686.namprd13.prod.outlook.com> |
--===============0243812886612226680==
Content-Language: en-US
Content-Type: multipart/alternative;
boundary="_000_CY4PR13MB1686736A847C0A6337D8A4E3E1C70CY4PR13MB1686namp_"
--_000_CY4PR13MB1686736A847C0A6337D8A4E3E1C70CY4PR13MB1686namp_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Good morning;
Is anyone experiencing issues with the latest version dropping all IP4 pack=
ets stating; (snort_decoder) WARNING: Not IPv4 datagram.
Worked perfectly when v2.9.13 was running on the same computer.
Thank you!
Ron Jenkins (Owner / Senior Architect)
RMJ Consulting, LLC. " Supporting Companies with their Technology needs"
11715 Bricksome Ave STE B-7
Baton Rouge, LA 70816
Direct. 225-448-5214 Ext #101
Cell. 225-931-1632
Web. http://www.rmjconsulting.net<http://www.rmjconsulting.net/>
Log Siphon. http://www.logsiphon.com<http://www.logsiphon.com/>
Linkedin. www.linkedin.com/in/ronmjenkins/<http://www.linkedin.com/in/ronmj=
enkins/>
Twitter: www.twitter.com/RMJConsulting<http://www.twitter.com/RMJConsulting>
Facebook: www.facebook.com/rmjcsconsulting<http://www.facebook.com/rmjcscon=
sulting>
RMJ Consulting's Technology Corner. https://www.rmjconsulting.net/main/pape=
r.php
PRIVILEGED & CONFIDENTIAL COMMUNICATION:
The information contained in this transmission may be privileged, confident=
ial, and exempt from disclosure under applicable law. It is intended only f=
or the use of the intended recipient. If you are not the intended recipient=
, you are hereby on notice that any unauthorized disclosure, dissemination,=
distribution, duplication, or taking any action in reliance on the content=
s of the electronically transmitted materials or contents of this communica=
tion is strictly prohibited. If you have received this communication in err=
or, please contact the sender by reply e-mail and destroy all copies of the=
original message. =
--_000_CY4PR13MB1686736A847C0A6337D8A4E3E1C70CY4PR13MB1686namp_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii">
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle18
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"#0563C1" vlink=3D"#954F72">
<div class=3D"WordSection1">
<p class=3D"MsoNormal">Good morning;<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal">Is anyone experiencing issues with the latest versio=
n dropping all IP4 packets stating;
<i>(snort_decoder) WARNING: Not IPv4 datagram</i>.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal">Worked perfectly when v2.9.13 was running on the sam=
e computer.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal">Thank you!<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal"><span style=3D"font-size:9.0pt">Ron Jenkins (Owner /=
Senior Architect)
<o:p></o:p></span></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:9.0pt">RMJ Consulting, L=
LC. </span>
</b><span style=3D"font-size:9.0pt">"</span> <i><span style=3D"font-si=
ze:9.0pt">Supporting Companies with their Technology needs</span></i><span =
style=3D"font-size:9.0pt">"<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:9.0pt">11715 Bricksome Ave =
STE B-7<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:9.0pt">Baton Rouge, LA 7081=
6<o:p></o:p></span></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:9.0pt">Direct</span></b>=
<span style=3D"font-size:9.0pt">. 225-448-5214 Ext #101<o:p></o:p></span></=
p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:9.0pt">Cell.</span></b><=
span style=3D"font-size:9.0pt"> 225-931-1632<o:p></o:p></span></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:9.0pt">Web.</span></b><s=
pan style=3D"font-size:9.0pt">
<a href=3D"http://www.rmjconsulting.net/">http://www.rmjconsulting.net</a><=
o:p></o:p></span></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:9.0pt">Log Siphon</span>=
</b><span style=3D"font-size:9.0pt">.
<a href=3D"http://www.logsiphon.com/">http://www.logsiphon.com</a><o:p></o:=
p></span></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:9.0pt">Linkedin.</span><=
/b><span style=3D"font-size:9.0pt">
<a name=3D"webProfileURL"></a><a href=3D"http://www.linkedin.com/in/ronmjen=
kins/" title=3D"View public profile"><span style=3D"mso-bookmark:webProfile=
URL">www.linkedin.com/in/ronmjenkins/</span><span style=3D"mso-bookmark:web=
ProfileURL"></span></a><span style=3D"mso-bookmark:webProfileURL"></span><o=
:p></o:p></span></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:9.0pt">Twitter:</span></=
b><span style=3D"font-size:9.0pt">
<a href=3D"http://www.twitter.com/RMJConsulting">www.twitter.com/RMJConsult=
ing</a> <o:p>
</o:p></span></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:9.0pt">Facebook: </span>=
</b><span style=3D"font-size:9.0pt"><a href=3D"http://www.facebook.com/rmjc=
sconsulting">www.facebook.com/rmjcsconsulting</a>
<o:p></o:p></span></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:9.0pt">RMJ Consulting=
217;s Technology Corner.</span></b><span style=3D"font-size:9.0pt">
<a href=3D"https://www.rmjconsulting.net/main/paper.php">https://www.rmjcon=
sulting.net/main/paper.php</a><o:p></o:p></span></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>
<html><body></i></b><p>PRIVILEGED & CONFIDENTIAL COMMUNICATION:<br>
The information contained in this transmission may be privileged, confident=
ial, and exempt from disclosure under applicable law. It is intended only f=
or the use of the intended recipient. If you are not the intended recipient=
, you are hereby on notice that any unauthorized disclosure, dissemination,=
distribution, duplication, or taking any action in reliance on the content=
s of the electronically transmitted materials or contents of this communica=
tion is strictly prohibited. If you have received this communication in err=
or, please contact the sender by reply e-mail and destroy all copies of the=
original message. <br>
</p></body></html>
--_000_CY4PR13MB1686736A847C0A6337D8A4E3E1C70CY4PR13MB1686namp_--
--===============0243812886612226680==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
Snort-devel mailing list
[email protected]
https://lists.snort.org/mailman/listinfo/snort-devel
Please visit http://blog.snort.org for the latest news about Snort!
--===============0243812886612226680==--