Snort mailing list archives

Re: Flex Resp and Libnet Routing


From: Jeff Nathan <jeff () snort org>
Date: Tue, 11 Feb 2003 12:05:56 -0800

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

A little patience and I think I will have a solution that will make almost 
everyone happy.  In the not-so-distant future I think snortees will see 
flexresp being faster and capable of responding from interfaces without an 
IP address.  To note, the ability to actually deliver a packet to its 
destination is completely dependent upon your network environment.

- -Jeff

- --On Friday, January 17, 2003 14:25:49 -0800 Christopher Lyon 
<cslyon () netsvcs com> wrote:

I saw this post a while back and it wasn't clear if something could be
done to force libnet / routing to be forced out a stealth interface. Is
that possible? So, mgt on eth0, sniffing on eth1 and the RST going out
eth1 which is stealth? What is the final word on this? I did remember a
post on this one that said it could be done but how?


http://marc.theaimsgroup.com/?l=snort-users&m=103826064006091&w=2




-------------------------------------------------------
This SF.NET email is sponsored by: Thawte.com - A 128-bit supercerts will
allow you to extend the highest allowed 128 bit encryption to all your
clients even if they use browsers that are limited to 40 bit encryption.
Get a guide here:http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0030en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


- --
http://www.snort.org/~jeff       (pgp key available)
"Great spirits have always encountered violent opposition from mediocre
minds."
- - Albert Einstein
    
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (OpenBSD)

iD8DBQE+SVenEqr8+Gkj0/0RAubsAJ9x6XBQB+/FQix+n2t3+3f5xWkHPgCfXQ+C
f3tB+M2bnsDJ/UvtdyUW/nA=
=VBzr
-----END PGP SIGNATURE-----



-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: