[Snort-users] Question about FlexResp

Sandra Estrada Moreno sandra.estrada at ...7658...
Thu Dec 5 17:30:02 EST 2002


Hi Guys,

Anyone could help me please!!
I have compiled my snort with "FlexResp" enabled
I have configured some rules in snort, with  "resp: rst_snd", like ....

alert tcp $HOME_NET any -> $EXTERNAL_NET any (msg:"Policy for
audiogalaxy";content:"audiogalaxy";reference:url,www.audiogalaxy.com;resp:rs
t_snd;)

But sometimes freezes the server  .... And log the messages:

Critical: SendTCPRST: libnet_write_ipCritical: SendTCPRST:
libnet_write_ipCritical: SendTCPRST: libnet_write_ipCritical: SendTCPRST:
libnet_write_ipCritical

What can I do??, 

Any help would be appreciated, thanks.
Regards!
Sandra




More information about the Snort-users mailing list