Hi there
If i make a string signature ,and define going to port 23.
I make my telnet connection and type the string i have defined in my string signature , I then get an alarm in my event viewer , no problem , all Perfect
BUT if i type the string again it doesn't fire off another alarm ,
If i disconnect my telnet session and do it all over again , then i will get an alarm the first time i do the string attack but not the second time
WHY
cheers
per