Project

General

Profile

Actions
Copy link

Feature #609

open
DV CT

Active Response in inline mode (like react in snort 2.9+)

Feature #609: Active Response in inline mode (like react in snort 2.9+)

Added by Dmitry Vlasov over 13 years ago. Updated about 7 years ago.

Status:
New
Priority:
Normal
Assignee:
Community Ticket
Target version:
TBD
Effort:
high
Difficulty:
medium
Label:

Description

Rule option keyword that enables sending an HTML page on a session and then resetting it

Example rule:
drop tcp any any -> any 80 (msg:"http://bad.url"; content:"Host: bad.url"; react: msg; sid:283; rev:1;)

http://manual.snort.org/node26.html#SECTION003114000000000000000

VJ Updated by Victor Julien over 12 years ago Actions
Copy link
 #1

  • Target version set to TBD

AH Updated by Andreas Herz over 10 years ago Actions
Copy link
 #2

  • Assignee set to OISF Dev

VJ Updated by Victor Julien about 10 years ago Actions
Copy link
 #3

  • Assignee changed from OISF Dev to Anonymous

VJ Updated by Victor Julien over 7 years ago Actions
Copy link
 #4

  • Effort set to high
  • Difficulty set to medium

AH Updated by Andreas Herz about 7 years ago Actions
Copy link
 #5

  • Assignee set to Community Ticket
Actions
Copy link

Also available in: PDF Atom