[Snort-users] UPDATE: flexresp2 (new and improved active response for Snort)

Jeff Nathan jeff at ...950...
Thu Sep 4 11:28:19 EDT 2003


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On Thursday, September 4, 2003, at 08:00 AM, jon baer wrote:

> hi,
>
> just as a general off the wall question ... is there a reason why 
> libnet
> 1.1.x is not used w/ flexresp2?  are there disadvantages?
>
> - jon

Very little of libnet is actually used inside flexresp and flexresp2.  
Ideally, flexresp2 would work with libnet-1.0.2a, libnet-1.1.x and 
libdnet.

Libnet-1.0.2a is used because it's lightweight, provides the needed 
functionality and I'm intimately familiar with it (oh, and the original 
author of flexrexp used it as well).

- -Jeff

- --
http://cerberus.sourcefire.com/~jeff       (gpg key available)
"Common sense is the collection of prejudices acquired by age
eighteen."   - Albert Einstein

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (Darwin)

iD8DBQE/V3hCEqr8+Gkj0/0RAiSpAJoCQTLg15saYmOwaq6547wht69P8wCcCueq
sVKZeYR9h21Gmi5VH6Av1cE=
=scy8
-----END PGP SIGNATURE-----





More information about the Snort-users mailing list