[Snort-devel] ANNOUNCE: flexresp2 (new and improved active response for Snort)

Jeff Nathan jeff at ...835...
Wed Sep 3 20:34:05 EDT 2003


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On Wednesday, September 3, 2003, at 12:10 PM, Chris Green wrote:
>
> One other thing on my mind: Does it grab the socket privledges before
> the privledge drop? :)
> -- 
> Chris Green <cmg at ...402...>
> Don't use a big word where a diminutive one will suffice.

I'll add some functionality to respond only to the client side for 
attack-response rules.

The socket is opened after the privilege drop.  This is pretty much 
trivial to fix.  I'll update this as well.

- -Jeff

- --
http://cerberus.sourcefire.com/~jeff       (gpg key available)
"Great spirits have always encountered violent opposition from
mediocre minds."   - Albert Einstein

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (Darwin)

iD8DBQE/VrJ3Eqr8+Gkj0/0RAvttAKCcaaLBN3h/I+EbRA07A8ZKtGBdawCfcUyc
Nu9UjupyF9jsbC5RNOCpats=
=RG2d
-----END PGP SIGNATURE-----





More information about the Snort-devel mailing list