RE: Flexresp

[Alwin Raymundo <alrayworld () yahoo com>]

Hi Ronneil,

Thanks.  I will take note of that.

How about to test if this works or not?  where to
look? is it on log files or on my mysql.

Thanks again.


--- Ronneil Camara <ronneilc () remingtonltd com> wrote:
> Just one note, I had bad experience with
> resp:rst_all;.
> It should be resp: rst_all;. Take note of the space.
>
> It's weird but works.
>
> > -----Original Message-----
> > From: Phil Wood [mailto:cpw () lanl gov]
> > Sent: Monday, April 08, 2002 1:35 PM
> > To: Alwin Raymundo
> > Cc: Snort-users () lists sourceforge net
> > Subject: Re: [Snort-users] Flexresp
> >
> >
> > Well,
> >
> > You could enable an ftp server on your snort box.
> > Set up your flexresp rules to include the address
> of your snort box.
> > Start your snort running.
> > Call your friends and ask them to pull down files
> from your snort box.
> > Ask your friends to let you know how it went.
> >
> > Later,
> >
> > On Mon, Apr 08, 2002 at 10:50:24AM -0700, Alwin
> Raymundo wrote:
> > > Hi Guys,
> > >
> > > I need your HELP!, I just recently recompiled my
> snort
> > > with-mysql and flexresp.
> > >
> > > Now my question is how do I know that flexresp
> is
> > > working, where do I look? that indicates the
> flexresp
> > > is working.
> > >
> > > I use the resp:rst_all; in some of snort rules.
> > >
> > > Your quick response is highly appreciated.
> > >
> > > Thanks in Advance.
> > >
> > >
> > >
> > > =====
> > > Alwin Raymundo
> __________________________________________________
> > > Do You Yahoo!?
> > > Yahoo! Tax Center - online filing with TurboTax
> > > http://taxes.yahoo.com/
> > >
> > > _______________________________________________
> > > Snort-users mailing list
> > > Snort-users () lists sourceforge net
> > > Go to this URL to change user options or
> unsubscribe:
> > >
https://lists.sourceforge.net/lists/listinfo/snort-users
> > > Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
> > -- 
> > Phil Wood, cpw () lanl gov
> >
> >
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or
> unsubscribe:
> >
https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
> >


=====
Alwin Raymundo

__________________________________________________
Do You Yahoo!?
Yahoo! Tax Center - online filing with TurboTax
http://taxes.yahoo.com/

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users