Snort mailing list archives

RE: Flexresp


From: "Ronneil Camara" <ronneilc () remingtonltd com>
Date: Mon, 8 Apr 2002 14:30:15 -0500

Just one note, I had bad experience with resp:rst_all;.
It should be resp: rst_all;. Take note of the space.

It's weird but works.

-----Original Message-----
From: Phil Wood [mailto:cpw () lanl gov]
Sent: Monday, April 08, 2002 1:35 PM
To: Alwin Raymundo
Cc: Snort-users () lists sourceforge net
Subject: Re: [Snort-users] Flexresp


Well,

You could enable an ftp server on your snort box.
Set up your flexresp rules to include the address of your snort box.
Start your snort running.
Call your friends and ask them to pull down files from your snort box.
Ask your friends to let you know how it went.

Later,

On Mon, Apr 08, 2002 at 10:50:24AM -0700, Alwin Raymundo wrote:
Hi Guys,

I need your HELP!, I just recently recompiled my snort
with-mysql and flexresp.

Now my question is how do I know that flexresp is
working, where do I look? that indicates the flexresp
is working.

I use the resp:rst_all; in some of snort rules.

Your quick response is highly appreciated.

Thanks in Advance.



=====
Alwin Raymundo

__________________________________________________
Do You Yahoo!?
Yahoo! Tax Center - online filing with TurboTax
http://taxes.yahoo.com/

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

-- 
Phil Wood, cpw () lanl gov


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: