Re: Triggering a complex snort rule (packet forging)

["lists () packetmail net" <lists () packetmail net>]

On 04/02/2013 04:47 PM, Asiri Rathnayake wrote:
> I hope this understanding is correct.

Yep, you're spot on.  Not to mention most firewalls will reject them as out of
session/out of sequence.

Cheers!
Nathan


------------------------------------------------------------------------------
Minimize network downtime and maximize team effectiveness.
Reduce network management and security costs.Learn how to hire 
the most talented Cisco Certified professionals. Visit the 
Employer Resources Portal
http://www.cisco.com/web/learning/employer_resources/index.html
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!