Re: Can snort cut off connections ?

[Dan Daggett <ddaggett () gmail com>]

> I heard that It is possible to change snort to be
> active and start droping connections based on
> predifined roles. is it true ?


Hogwash will accomplish what you are talking about.  It works with
Snort adds the functionality to drop or change packets as they come in
and out.

http://hogwash.sourceforge.net

Dan Daggett

---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off 
any course! All of our class sizes are guaranteed to be 10 students or less 
to facilitate one-on-one interaction with one of our expert instructors. 
Attend a course taught by an expert instructor with years of in-the-field 
pen testing experience in our state of the art hacking lab. Master the skills 
of an Ethical Hacker to better assess the security of your organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------