Snort mailing list archives
resp?
From: "Ben Johansen" <benj () intelisoft net>
Date: Tue, 15 May 2001 11:27:18 -0700
Hi all Newbie Here. How do I implement the "resp" I was trying alter this in the webmisc lib: alert tcp $EXTERNAL_NET any -> $HOME_NET 80 (msg:"WEB-MISC-cmd.exe Attempt";flags:PA; resp: rst_all; content:"scripts/../../cmd.exe"; nocase;) ----- Ben Johansen President - Intelisoft, Inc. benj () intelisoft net office: 503-735-1658 fax: 503-286-1263 pager: 5039090998 () alphapage airtouch com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: http://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- resp? Ben Johansen (May 15)
- <Possible follow-ups>
- Re: resp? Neil Dickey (May 15)