TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------
Hi Ram,
Firstly, you cannot use a RealSecure KILL to control a ping flood. The
RealSecure KILL only applies to TCP sessions. The RealSecure KILL does
not apply to ICMP packets.
Secondly, the existing supplied PingFlood alert is based on special
internal code for performance reasons (to help prevent denial of
service attacks against the Network Sensor etc); this code is
processed BEFORE any FILTERs or CONNECTION EVENTs you create.
Jason
On Fri, 6 Jul 2001 15:17:02 -0500 , you wrote:
>
>TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
>[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
>----------------------------------------------------------------------------
>
>Hello to all.
>I am running Real Secure Console version 5.5 in a PC with W2K and an Real
>Secure Network Sensor in a PC win NT Server 4.0. The problem is that I
>configured an additional event in the option Connection Events of the
>politics of the network sensor that notified me, it registered and it
>disconnected, any session ping with protocol ICMP from an address specific
>IP to any other address, be external or internal, but it doesn't work since
>when being generated a Pingflood from this machine The Real Secure Network
>Sensor it notifies it but under the default established event in the
>political one and not per the one that I settled down. I clarify that I have
>other configured additional events and these if they work me.
>
>I thank the collaboration that you/they can lend me.
>
>Ram.
>
>
>
>
Jason.Renard at Mail.Com
Warning - all views expressed are my own.
I cannot guarantee the accuracy of everything
I've said - use it at your own risk.
