Snort mailing list archives
Re: Snort-users digest, Vol 1 #1890 - 10 msgs
From: Glenn Larsson <ichinin () swipnet se>
Date: Thu, 16 May 2002 04:50:10 +0200
Just as a note, ATTACK RESPONSES is designed to show whats coming from your network and so measuring the internal TTL is showing how your routes have changed.
Ahhh...Sorry, should have taken some other event to explain how the TTL despoofing was done. This was a event selected at random, i used that to create the sample event(s) :o\ I'll be more careful about examples in the future. Thanks, Glenn _______________________________________________________________ Have big pipes? SourceForge.net is looking for download mirrors. We supply the hardware. You get the recognition. Email Us: bandwidth () sourceforge net _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Re: Snort-users digest, Vol 1 #1890 - 10 msgs Glenn Larsson (May 16)