Snort mailing list archives

RE: Anyone heard of TCP Drop Records?


From: "Jason Lewis" <jlewis () packetnexus com>
Date: Mon, 18 Feb 2002 21:16:27 -0500

I am trying to play along, but I don't see why we are drinking!!
Unless.....

Post contains a "Stupid Management Tricks" story.

I didn't word that SNMP stuff correctly, it made sense when I typed it.
heh.

How many drinks if the post is OT?  For those of you that are confused.
http://www.theadamsfamily.net/~erek/snort/drinking_game.txt

jas



-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net]On Behalf Of Rich
Adamson
Sent: Monday, February 18, 2002 8:32 PM
To: snort-users () lists sourceforge net
Subject: RE: [Snort-users] Anyone heard of TCP Drop Records?



I figure it's a test.  ;)

There is an SNMP command TCP Drop, but I don't think that is it.  The man
in
the middle stuff is probably more likely, it was in the context of IDS, so
maybe they are referring to monitoring those kinds of attacks.

SNMP has a very limited number of _commands_, and TCP Drop is not one.

Whoever wrote that probably intended to mean initiating some action to
tell a firewall box to drop the offending packet. That would make snort
omnicsient! Cool! Or, maybe its just HR!   ;)

Two more beers!




_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: