lkml.org 
[lkml]   [2001]   [May]   [22]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: Final Warning [ was: ECN is on! ]


What is ECN? Is it the reason SNORT has started this lately:

<snip>

Active System Attack Alerts
=-=-=-=-=-=-=-=-=-=-=-=-=-=
May 22 10:11:18 pooh snort: spp_portscan: PORTSCAN DETECTED from 199.183.24.194 (STEALTH)
May 22 10:11:22 pooh snort: spp_portscan: portscan status from 199.183.24.194: 1 connections across 1 hosts: TCP(1), UDP(0) STEALTH

</snip>

See ya,
Joe Barr




On Tue, 22 May 2001 10:57:34 -0400




David Relson <relson@osagesoftware.com> wrote:

> At 10:18 AM 5/22/01, Steve Modica wrote:
>
>
> >Perhaps it's none of my business, but it doesn't seem very sporting to
> >just turn something on that breaks stuff and say "you had fair
> >warning". Why not shut it back off, issue a statement saying it works
> >now and will be re-enabled on June 10th or something, and everyone must
> >do thus and so or they will break on that day?
> >
> >Vague things like "it'll be turned on real soon now" or ASAP really mean
> >"never" since admins always have things with real deadlines at the top
> >of their list.
>
>
> I'd suggest something like:
>
> Final Warning. ECN is being turned on NOW. If your firewall doesn't
> support ECN, this will be the last message that gets through to you from us.
>
> Such a message will have the interesting characteristic of being the last
> message received. This will make it obvious why no further messages are
> arriving.
>
> David
>
> --------------------------------------------------------
> David Relson Osage Software Systems, Inc.
> relson@osagesoftware.com Ann Arbor, MI 48103
> www.osagesoftware.com tel: 734.821.8800
>
> -
> To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at http://vger.kernel.org/majordomo-info.html
> Please read the FAQ at http://www.tux.org/lkml/
>


--

#--------------------------------------------------#
| Joe Barr warthawg@blackhat.net |
| Longears and Linux........... nowhere but Texas! |
#--------------------------------------------------#
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 12:53    [W:0.056 / U:27.524 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site