[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-users] WORM PROPATATION at port 1433/1434
- Subject: Re: [cobalt-users] WORM PROPATATION at port 1433/1434
- From: "Zeffie" <cobaltlist@xxxxxxxx>
- Date: Wed Nov 19 02:55:00 2003
- List-id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
> Could anyone suggest that how could we start snort - so that for
snort
> the system does not get effected due to load etc... But what we feel that
due
> to the too much traffic the load went too high. Do you think as snort was
> detecting the messages - due to that reason load went
> high?
I'm not sure that snort was the problem... but if you built snort with
FlexResponse you can adjust the rules as needed to do a variety of things...
see the FlexResponse docs for that...
Zeffie
Cobalt RaQ System Administration, Maintenance and Repairs.
http://www.zeffie.com/how_to_contact_zeffie.html 734.454.9117
http://www.zeffie.com/ Home of the Worlds Largest Collection of RaQ rpms
Advanced Cobalt Security, Firewall, Snort, AntiSpam, AntiVirus and other
GUI's