- Bronze, 100 points or more
Why don't signatures 1301 and 1304 produce alert even if "Produce Alert" event-action is specified for those signatures (promisc. mode)?
Is it possible to send RST or shun a connection in promisc. mode when those signatures fire?
I have this problem too.