Snort mailing list archives
Synflood preprocessor?
From: Lezgin Bakircioglu <lerra82 () gmail com>
Date: Fri, 05 May 2006 13:12:26 +0200
Hi everybody, I am wondering if there is any simple synflood detector out there that counts syns and alarm if it goes way up? I have try d to google this up but cant find anything, just a suggestion that recoding a preprocessor "should" not be that hard, this was a couple of years ago so I wonder if somebody have done this and is willing to share? I want this to prove that its possible, nothing else.
If not, is there any other smart ways to detect them?I have seen projects like syndetector or rate limiting in iptables but its not what I am seeking.
------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Synflood preprocessor? Lezgin Bakircioglu (May 05)