Snort mailing list archives
Re: anyone succeeded using "react" option!!?
From: Andreas Hasenack <andreas () conectiva com br>
Date: Mon, 29 Jul 2002 16:41:45 -0300
Em Mon, Jul 29, 2002 at 12:12:50PM -0700, funky escreveu:
option, i wanna use "react" for blocking the requests and sending message to the browser but it only logs, doesn't block :( Anyone avanced in these options and can help me?
Sometimes it doesn't work. There is a race here: snort sees the traffic "in parallel" and has to react. If the target machine answers first tere is nothing snort can do about it. Unless you run something like hogwash (see sourceforge or freshmeat). ------------------------------------------------------- This sf.net email is sponsored by: Dice - The leading online job board for high-tech professionals. Search and apply for tech jobs today! http://seeker.dice.com/seeker.epl?rel_code=31 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- anyone succeeded using "react" option!!? funky (Jul 29)
- Re: anyone succeeded using "react" option!!? hackerwacker (Jul 29)
- Re: anyone succeeded using "react" option!!? funky (Jul 29)
- Re: anyone succeeded using "react" option!!? Andreas Hasenack (Jul 29)
- Re: anyone succeeded using "react" option!!? funky (Jul 29)
- Re: anyone succeeded using "react" option!!? hackerwacker (Jul 29)
