Snort mailing list archives
Re: Snort as IPS
From: "Guillaume Arcas" <guillaume.arcas () free fr>
Date: Thu, 22 Apr 2004 17:56:13 +0200 (CEST)
Nicolas Saurbier a dit :
I need an IPS, that drops Packages when they arrive. Can Snort do this job?
Yes, when compiled with flexresp enabled, you can embedded tags in your rules that allow you to reset connections on different ways. http://www.snort.org/docs/snort_manual/node16.html#SECTION00373000000000000000 PS: do not believe all that Gartner Group said about IDS anyway... :-) -- Guillaume Arcas -------------------------------------------------- Il faut nous quitter. Nous sommes deux enfants, nous avons fait une folie. (Yvonne de Galais) ------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id70&alloc_id638&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort as IPS Nicolas Saurbier (Apr 22)
- Re: Snort as IPS Guillaume Arcas (Apr 22)
- <Possible follow-ups>
- RE: Snort as IPS Che Wan Zaharudin (Apr 22)