Snort.org home  
Got Source? About Snort About Sourcefire Snort FAQ
Sourcefire Network Security - the creators of Snort

Snort Forums Archive

Archive Home » Support » Snort FlexResp - Blocking P2P Traffic

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

Snort FlexResp - Blocking P2P Traffic


Posted by rjenkins on March 12, 2005 18:53:26

Is anyone using Snort's FlexResp to block this traffic?

If so, have you had good results and which options within the rule worked best?

Thanks...

Posted by smome on April 18, 2005 15:30:12

Hey, I'm not seeing many P2P sessions on my University network when I should be. Did you need to modify the P2P rules ? Also, I believe ARES is popular now, are many people looking into P2P rules, or are u and I the only ones ?