Snort mailing list archives

flexresp question


From: ravath k <ravath82 () yahoo com>
Date: Thu, 4 Mar 2004 13:44:25 -0800 (PST)

Hi,

I am using snort 2.1.1 with flexresp. One interface of
snort box is connected to Cisco 2950 switch of DMZ
network and other one (administrative interface) to
private network switch. So far working good. The
problem is i have some rules which are supposed to
reset connections but am getting only alerts of
flexresp rules and snort is not resetting connections.

Can anyone tell me what could be the problem? One more
basic doubt is can snort send packets on span port?

thanks in advance
ravath


__________________________________
Do you Yahoo!?
Yahoo! Search - Find what you’re looking for faster
http://search.yahoo.com


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: