Re: flexresp2 is back and needs testing

[Jeff Nathan <jeff () snort org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On Sep 8, 2004, at 4:30 PM, James Riden wrote:

> Jeff Nathan <jeff () snort org> writes:
>
> > Yes, I finished a testable version.  It's in your inbox.  As for the
> > rest of the snortees, anyone wishing to test this before it's imported
> > into the tree should email me directly or find me on the freenode IRC
> > channel.
>
> What changes have gone into the latest version? I'm happy to test, but
> if I'm not likely to be triggering any bugs, it may not be very much
> use.
>
> cheers,
>  Jamie
> --
> James Riden / j.riden () massey ac nz / Systems Security Engineer
> Information Technology Services, Massey University, NZ.
> GPG public key available at: http://www.massey.ac.nz/~jriden/


The latest version is much more aggressive in brute forcing TCP 
sequence and acknowledgment numbers so it can successfully reset a TCP 
session.  Also, the latest version rate-limits responses in the event 
someone creates a rule that can be triggered repeatedly.

- -Jeff

- --
Craft custom packets from the comfort of your home.
http://nemesis.sourceforge.net
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)

iD8DBQFBP3BXEqr8+Gkj0/0RAvjgAJ41X2mZllFI8eExvxkul34ggqovXQCeL7Py
bBw0R2hWPVqcjU4bleJaEXA=
=RnDq
-----END PGP SIGNATURE-----



-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users