Snort mailing list archives
Re: flexresp2 is back and needs testing
From: Jeff Nathan <jeff () snort org>
Date: Wed, 8 Sep 2004 16:49:23 -0400
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Sep 8, 2004, at 4:30 PM, James Riden wrote:
Jeff Nathan <jeff () snort org> writes:Yes, I finished a testable version. It's in your inbox. As for the rest of the snortees, anyone wishing to test this before it's imported into the tree should email me directly or find me on the freenode IRC channel.What changes have gone into the latest version? I'm happy to test, but if I'm not likely to be triggering any bugs, it may not be very much use. cheers, Jamie -- James Riden / j.riden () massey ac nz / Systems Security Engineer Information Technology Services, Massey University, NZ. GPG public key available at: http://www.massey.ac.nz/~jriden/
The latest version is much more aggressive in brute forcing TCP sequence and acknowledgment numbers so it can successfully reset a TCP session. Also, the latest version rate-limits responses in the event someone creates a rule that can be triggered repeatedly.
- -Jeff - -- Craft custom packets from the comfort of your home. http://nemesis.sourceforge.net -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (Darwin) iD8DBQFBP3BXEqr8+Gkj0/0RAvjgAJ41X2mZllFI8eExvxkul34ggqovXQCeL7Py bBw0R2hWPVqcjU4bleJaEXA= =RnDq -----END PGP SIGNATURE----- ------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- flexresp2 is back and needs testing Jeff Nathan (Jul 25)
- RE: flexresp2 is back and needs testing pfeito (Aug 30)
- Re: flexresp2 is back and needs testing Jeff Nathan (Aug 30)
- <Possible follow-ups>
- RE: flexresp2 is back and needs testing pfeito (Aug 30)
- Re: flexresp2 is back and needs testing Jeff Nathan (Aug 31)
- Re: flexresp2 is back and needs testing Pedro Fortuna (Aug 31)
- Re: flexresp2 is back and needs testing Pedro Fortuna (Sep 05)
- Re: flexresp2 is back and needs testing Jeff Nathan (Sep 08)
- Re: flexresp2 is back and needs testing James Riden (Sep 08)
- Re: flexresp2 is back and needs testing Jeff Nathan (Sep 08)
- Re: flexresp2 is back and needs testing Pedro Fortuna (Sep 08)
- Re: flexresp2 is back and needs testing Jeff Nathan (Sep 08)
- Re: flexresp2 is back and needs testing Pedro Fortuna (Sep 08)
- Re: flexresp2 is back and needs testing Jeff Nathan (Sep 08)
- Re: flexresp2 is back and needs testing Pedro Fortuna (Sep 09)
- Re: flexresp2 is back and needs testing Jeff Nathan (Sep 09)
- Re: flexresp2 is back and needs testing Pedro Fortuna (Sep 18)
- flexresp2 is in CVS Jeff Nathan (Sep 18)
- Re: flexresp2 is back and needs testing Jeff Nathan (Aug 31)
- RE: flexresp2 is back and needs testing pfeito (Aug 30)