Snort mailing list archives

Re: TCP Reset


From: Andreas Hasenack <andreas () netbank com br>
Date: Sun, 20 May 2001 11:33:35 -0300

Em Sun, May 20, 2001 at 08:57:26AM -0500, michael.porter () hushmail com escreveu:
In an earlier mail John Lampe wrote:
It's useless (in some instances, more than useless) against SYN-floods,
 

Do you mean that TCP Reset can actually cause potential damage during some 
SYN Floods? Could you explain?

They will fill up your bandwidth on the other way around, and yes, are probably
useless, because the source IP is probably false.


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: