[Snort-users] flexresp - I have 2 stupid questions

Matt Kettler mkettler at ...4108...
Wed Nov 26 08:56:02 EST 2003


At 10:26 AM 11/26/2003, Rich Stryker wrote:
>*       If I have unbound TCP/IP on the outside NIC where I have set 
>flexresp, I have set the rules to send ICMP null responses, will flexresp 
>actually work?

It should... flexresp uses libnet to generate the packets and does not rely 
on the local tcp/ip stack.

>*       How do you know if flexresp is working?

Um.. test it?






More information about the Snort-users mailing list