Re: Snort inline timeout

[Will Metcalf <william.metcalf () gmail com>]

hmmm I'm not sure what you mean, by default drops are done on a per
packet basis. In the case of tcp the packet deemed "bad" get's
retransmitted and those retransmissions are dropped as well. Could you
elaborate?

Regards,

Will

On Wed, Jul 29, 2009 at 12:55 PM, <guerrilha () gmail com> wrote:
> Hi People,
>
>  does anyone know if an inline compiled from snort core (./configure
> --enable-inline) has a timeout value for its drops (any default time i
> could have missed in snort's manual)? Or will the drops registered
> into iptables be there like... permanently?
>
>
> Kind regards,
>
> Ailton Caetano
>
> ------------------------------------------------------------------------------
> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
> trial. Simplify your report design, integration and deployment - and focus on
> what you do best, core application coding. Discover what's new with
> Crystal Reports now.  http://p.sf.net/sfu/bobj-july
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users