Snort mailing list archives
Re: TCP Reset
From: Andreas Hasenack <andreas () netbank com br>
Date: Sun, 20 May 2001 11:33:35 -0300
Em Sun, May 20, 2001 at 08:57:26AM -0500, michael.porter () hushmail com escreveu:
In an earlier mail John Lampe wrote:It's useless (in some instances, more than useless) against SYN-floods,Do you mean that TCP Reset can actually cause potential damage during some SYN Floods? Could you explain?
They will fill up your bandwidth on the other way around, and yes, are probably useless, because the source IP is probably false. _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: http://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- TCP Reset michael . porter (May 19)
- <Possible follow-ups>
- RE: TCP Reset Frank Knobbe (May 19)
- RE: TCP Reset Lampe, John W. (May 19)
- RE: TCP Reset michael . porter (May 20)
- Re: TCP Reset Andreas Hasenack (May 20)
- RE: TCP Reset Lampe, John W. (May 20)
- RE: TCP Reset michael . porter (May 20)
- RE: TCP Reset Erik Engberg (May 22)