[Snort-users] flexresp2 is back and needs testing

Jeff Nathan jeff at ...950...
Tue Aug 31 12:22:21 EDT 2004


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On Aug 30, 2004, at 11:36 AM, pfeito wrote:

> Here it goes Jeff,
>
> I made a new pcap, this time with a "reset_dest" rule. It didnt work 
> also. Cant think of anything that could be wrong :\
>
> The pcap was captured on the FTP (212.22.xx.xx). The remote client is 
> the 193.xx.xx.xx.
>
> Thanks again!
>
> -pfeito

Thanks, your pcap capture is exactly what I need.  I believe I see the 
problem.  It'll require a little work to rest the fix.

- -Jeff


- --
The original EZ-bake packet oven.
http://nemesis.sourceforge.net
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)

iD8DBQFBNM2QEqr8+Gkj0/0RAu5KAKCVFlgognx4hvjWvDFwqs4loutD2ACggeRh
t1rZ6rciVhFdOQiXRMRn1ls=
=pyPh
-----END PGP SIGNATURE-----





More information about the Snort-users mailing list