[Snort-users] TCP Reset

Andreas Hasenack andreas at ...814...
Sun May 20 10:33:35 EDT 2001


Em Sun, May 20, 2001 at 08:57:26AM -0500, michael.porter at ...1284... escreveu:
> In an earlier mail John Lampe wrote:
> >It's useless (in some instances, more than useless) against SYN-floods,
>  
> 
> Do you mean that TCP Reset can actually cause potential damage during some 
> SYN Floods? Could you explain?

They will fill up your bandwidth on the other way around, and yes, are probably
useless, because the source IP is probably false.





More information about the Snort-users mailing list