[Snort-users] Snort as IPS

Guillaume Arcas guillaume.arcas at ...953...
Thu Apr 22 08:57:00 EDT 2004


Nicolas Saurbier a dit :

> I need an IPS, that drops Packages when they arrive. Can Snort do this
> job?

Yes, when compiled with flexresp enabled, you can embedded tags in your
rules that allow you to reset connections on different ways.

http://www.snort.org/docs/snort_manual/node16.html#SECTION00373000000000000000

PS: do not believe all that Gartner Group said about IDS anyway... :-)

-- 
Guillaume Arcas

--------------------------------------------------
Il faut nous quitter. Nous sommes deux enfants,
nous avons fait une folie. (Yvonne de Galais)




More information about the Snort-users mailing list