[Snort-users] Re: Snort-users: PortScan resets

Richard Bejtlich taosecurity at ...11827...
Wed Jun 8 08:06:53 EDT 2005


Eduardo E. Silva wrote:

> nOOb question...
> 
> How can I tell snort to reset connections for portscans ?
> 

Ed, why would you want to do this?  Flexible response is best suited
for established TCP connections.

Sincerely,

Richard
http://www.taosecurity.com




More information about the Snort-users mailing list