Snort mailing list archives
Snort+flexresp
From: Sonika Malhotra <sonikam () magnum barc ernet in>
Date: Mon, 11 Mar 2002 17:49:10 +0530
Hello List, I am testing snort+postgresql+flexresp (ver 1.8.3) on Rh 7.2 Dual Processor System.I have configured the rule file "web-iis.rules" to include the response for "cmd.exe" type of attacks. ......resp: rst_all ; logto: "Response_log";); but if i test this in my own network. It doesn't seem to work.ie on my web server I can see the corresponding connection in "ESTABLISHED" state.(netstat output) if i am going wrong somwhere plz correct me. regds:- sm _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort+flexresp Sonika Malhotra (Mar 11)
- Re: Snort+flexresp Roelof JT Jonkman (Mar 11)
- Re: Snort+flexresp Sonika Malhotra (Mar 12)
- RE: Snort+flexresp skill2die4 (Mar 13)
- RE: Snort+flexresp Bamm (Robert) Visscher (Mar 13)
- Re: Snort+flexresp Sonika Malhotra (Mar 14)
- Re: Snort+flexresp Sam (Mar 14)
- Re: Snort+flexresp Bamm Visscher (Mar 14)
- Re: Snort+flexresp Jeff Nathan (Mar 25)
- Re: Snort+flexresp Bamm Visscher (Mar 26)
- Re: Snort+flexresp Jeff Nathan (Mar 26)
- Re: Snort+flexresp Sonika Malhotra (Mar 12)
- Re: Snort+flexresp Roelof JT Jonkman (Mar 11)