Snort mailing list archives

Re: anyone succeeded using "react" option!!?


From: Andreas Hasenack <andreas () conectiva com br>
Date: Mon, 29 Jul 2002 16:41:45 -0300

Em Mon, Jul 29, 2002 at 12:12:50PM -0700, funky escreveu:
option, i wanna use "react" for blocking the requests
and sending message to the browser but it only logs,
doesn't block :(
Anyone avanced in these options and can help me?

Sometimes it doesn't work. There is a race here: snort sees
the traffic "in parallel" and has to react. If the target
machine answers first tere is nothing snort can do about it.

Unless you run something like hogwash (see sourceforge or
freshmeat).



-------------------------------------------------------
This sf.net email is sponsored by: Dice - The leading online job board
for high-tech professionals. Search and apply for tech jobs today!
http://seeker.dice.com/seeker.epl?rel_code=31
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: