Snort mailing list archives
RE: Slow down TCP connections
From: "Jim Hendrick" <jrhendri () maine rr com>
Date: Sun, 29 Aug 2004 16:22:28 -0400
If you are looking to slow down scans, try a tarpit (e.g. labrea) flexrsp is really designed to reset TCP connections to halt an attack. -----Original Message----- From: snort-users-admin () lists sourceforge net [mailto:snort-users-admin () lists sourceforge net] On Behalf Of pfeito Sent: Sunday, August 29, 2004 12:57 PM To: snort-users () lists sourceforge net Subject: [Snort-users] Slow down TCP connections Hi Guys, I'm searching for pro-active plug-ins for Snort. Right know, I've just compiled and installed snort 2.2.0 with flexresp2 support. I'm about to test flexresp2 capabilities, but It seems to have no support for slowing down TCP connections (i.e. for slowing down TCP Scans for instance...) Do you know any plug-in that allows Snort to slow down TCP connections speed (i.e. resize TCP window size) ? Thanks, -pfeito ------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users ------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_idP47&alloc_id808&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- thanks guys! Jeremy Kocimski (Aug 29)
- Slow down TCP connections pfeito (Aug 29)
- Re: Slow down TCP connections Keith W. McCammon (Aug 29)
- RE: Slow down TCP connections pfeito (Aug 29)
- Re: Slow down TCP connections Jeff Nathan (Aug 29)
- Re: Slow down TCP connections James Edwards (Aug 29)
- RE: Slow down TCP connections Jim Hendrick (Aug 29)
- RE: Slow down TCP connections pfeito (Aug 29)
- Re: Slow down TCP connections Jose Maria Lopez (Aug 31)
- Re: Slow down TCP connections Keith W. McCammon (Aug 29)
- Slow down TCP connections pfeito (Aug 29)