LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 05-20-2004, 03:52 PM   #1
OlRoy
Member
 
Registered: Dec 2002
Posts: 304

Rep: Reputation: 86
Snort's Flow Control options


Whats the difference between the flow control options (like to/from_server and to/from_client) and the arrow in the rule header that specifies the direction. Also what is the difference between these flow control options:

to_server and from_client
from_server and to_client
only_stream and established
no_stream and stateless

This all seems pretty redundant to me.
 
Old 05-25-2004, 04:09 PM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3594Reputation: 3594Reputation: 3594Reputation: 3594Reputation: 3594Reputation: 3594Reputation: 3594Reputation: 3594Reputation: 3594Reputation: 3594Reputation: 3594
Whats the difference between the flow control options (...) and the arrow in the rule
Flow control is used where separate packets are stitched together to form a stream, flow. That way Snort can examine more. The "Writing Snort rules" HOWTO on Snort.org has the gory details (2.3.35 Flow).
 
Old 05-28-2004, 03:43 PM   #3
OlRoy
Member
 
Registered: Dec 2002
Posts: 304

Original Poster
Rep: Reputation: 86
Thanks... thats pretty cool you can make it stateful on a per rule basis.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Setting media type/flow control Levitate Linux - Networking 1 12-29-2004 03:40 PM
Serial flow control in 2.6.8 kidzmom3 Linux - General 1 12-08-2004 09:47 AM
EXT3-control flow? shrey_j Programming 0 10-18-2004 01:42 AM
Setting Flow Control/Media Type hanserr Fedora 2 07-27-2004 11:13 AM
what should be my flow control values? HW? SF? or NONE? kublador Linux - Networking 0 06-08-2003 12:03 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 09:16 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration