resp?

["Ben Johansen" <benj () intelisoft net>]

Hi all Newbie Here.

How do I implement the "resp"

I was trying alter this in the webmisc lib:
alert tcp $EXTERNAL_NET any -> $HOME_NET 80 (msg:"WEB-MISC-cmd.exe
Attempt";flags:PA; resp: rst_all; content:"scripts/../../cmd.exe"; nocase;)


-----
Ben Johansen
President - Intelisoft, Inc.
benj () intelisoft net
office: 503-735-1658 fax: 503-286-1263
pager: 5039090998 () alphapage airtouch com



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users