TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ----------------------------------------------------------------------------
Hello Andre, Yes network sensor can send a RS Kill using the stealth mode. Below is an excerpt from the Installation Guide of RS Network Sensor 6.5 ***************************************************** For Windows and Solaris sensors, you should configure the first NIC to be the reporting NIC. This NIC is connected to an internal, secured network and has a full TCP/IP protocol stack with an IP address and IP services. This channel is used by the network sensors to communicate with the console. The console could be several network hops away, or you could create a small network segment just for the network sensors and console by using a hub or crossover cable. The second NIC is connected to the monitored network segment. It does not have a protocol stack bound to it; therefore, it does not have an IP address or any IP services available. This configuration makes it more difficult for an external attacker to attack the network sensor itself through this interface. The RS Kill response that kills the connection must be sent from the monitoring interface. Best Regards, glennmarquez > -----Original Message----- > From: Andre Amaro Toffanello > [mailto:[EMAIL PROTECTED]] > Sent: Thursday, September 05, 2002 10:10 PM > To: [EMAIL PROTECTED] > Subject: RealSecure use stealth mode NIC > > > Hi, > > Can a Network Sensor using a stealth mode NIC send a > Kill connection > (TCP reset)? > > Sorry my poor english. > > tks. > > > > ATTACHMENT part 2 application/octet-stream name=ATT19507.dat __________________________________________________ Do You Yahoo!? Yahoo! Finance - Get real-time stock quotes http://finance.yahoo.com
