[Snort-users] Confirming flexresponse
cdiaz at ...14117...
Tue May 1 10:09:47 EDT 2007
I compiled snort with flexresponse enabled and added "resp:rst_all" to a
few P2P rules. I still see alerts on those rules in BASE, but I assume
that after it is detected, the RST packet is sent and the connection
Is there a way to confirm that the response is taking place, and then if
it worked or not?
Thanks in advance for your help,
Network Security Engineer
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-users