[Snort-devel] Syn-Reset detection and others ...

rmkml rmkml at ...1042...
Mon Mar 10 08:16:22 EST 2003


Hi,

How detect (stream4 ?):
-Syn sent
-Reset response

Or detect Syn Timeout ?

Or udp sent and icmp unreachable  response ?

example rule ?

Regards.

PS: I use snort 1.9.1 on Freebsd 4.7Release.





More information about the Snort-devel mailing list