Flexresp question

[ravath k <ravath82 () yahoo com>]

I am using snort 2.1.1 with flexresp. One interface of
snort box is connected to Cisco 2950 switch of DMZ
network and other one (administrative interface) to
private network switch. So far working good. The
problem is i have some rules which are supposed to
reset connections but am getting only alerts of
flexresp rules and snort is not resetting connections.

My basic question is if a port is configured as SPAN
port, can it send packets on that interface? If not,
how snort will reset connections?

Can anyone clarify my doubts?

thanks in advance
ravath

__________________________________
Do you Yahoo!?
Yahoo! Search - Find what you’re looking for faster
http://search.yahoo.com


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users