Snort mailing list archives

Question about FlexResp


From: Sandra Estrada Moreno <sandra.estrada () metalsa com mx>
Date: Thu, 5 Dec 2002 19:28:50 -0600



Hi Guys,

Anyone could help me please!!
I have compiled my snort with "FlexResp" enabled
I have configured some rules in snort, with  "resp: rst_snd", like ....

alert tcp $HOME_NET any -> $EXTERNAL_NET any (msg:"Policy for
audiogalaxy";content:"audiogalaxy";reference:url,www.audiogalaxy.com;resp:rs
t_snd;)

But sometimes freezes the server  .... And log the messages:

Critical: SendTCPRST: libnet_write_ipCritical: SendTCPRST:
libnet_write_ipCritical: SendTCPRST: libnet_write_ipCritical: SendTCPRST:
libnet_write_ipCritical

What can I do??, 

Any help would be appreciated, thanks.
Regards!
Sandra


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: