[Snort-users] resp?

Ben Johansen benj at ...2026...
Tue May 15 14:27:18 EDT 2001


Hi all Newbie Here.

How do I implement the "resp"

I was trying alter this in the webmisc lib:
alert tcp $EXTERNAL_NET any -> $HOME_NET 80 (msg:"WEB-MISC-cmd.exe
Attempt";flags:PA; resp: rst_all; content:"scripts/../../cmd.exe"; nocase;)


-----
Ben Johansen
President - Intelisoft, Inc.
benj at ...2026...
office: 503-735-1658 fax: 503-286-1263
pager: 5039090998 at ...2027...






More information about the Snort-users mailing list