Snort mailing list archives
Re: Is anyone using 'react' to block the use of Gnutella?
From: "hackerwacker" <hackerwacker () cybermesa com>
Date: Mon, 23 Sep 2002 16:02:22 -0600
I had not realized he was talking about RST's for initial gets, as opposed to a more dirty catch all rule for Gnutella. ----- Original Message ----- From: "Matt Kettler" <mkettler () evi-inc com> To: <snort-users () lists sourceforge net> Sent: Monday, September 23, 2002 3:32 PM Subject: Re: [Snort-users] Is anyone using 'react' to block the use of Gnutella?
Hmm, a packet storm? Is Gnutella somehow particularly ill-behaved and not using the OS's IP stack (raw socket level interface, as a P2P app? evil..) TCP is pretty well behaved about this kind of thing. I'd like to see how this properly amplifies or sustains in order to act as a storm. At 02:22 PM 9/23/2002 -0600, hackerwacker wrote:NOT advised. Unless you want a packet storm.------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Is anyone using 'react' to block the use of Gnutella? Vieth, Scott (Sep 23)
- Re: Is anyone using 'react' to block the use of Gnutella? hackerwacker (Sep 23)
- Re: Is anyone using 'react' to block the use of Gnutella? Matt Kettler (Sep 23)
- Re: Is anyone using 'react' to block the use of Gnutella? hackerwacker (Sep 23)
- Re: Is anyone using 'react' to block the use of Gnutella? Matt Kettler (Sep 23)
- Re: Is anyone using 'react' to block the use of Gnutella? Matt Kettler (Sep 23)
- Re: Is anyone using 'react' to block the use of Gnutella? hackerwacker (Sep 23)
- Re: Is anyone using 'react' to block the use of Gnutella? Frederick Garbrecht (Sep 24)
- <Possible follow-ups>
- Re: Is anyone using 'react' to block the use of Gnutella? Joe Giles (Sep 24)