[Bro] how can I find the rst utility

Jason Lee JRLee at lbl.gov
Fri Aug 13 11:24:45 PDT 2004


I'm not sure about the 'rst utility', but I think you
can use hping2 (http://www.hping.org) instead. (if you
don't want to code your own :)

I believe that something along the lines of:

hping2 -R --tcpseq seqnum -s srcport -d dstport -a srchost dsthost

or some such should work, you'll have to play with it, but I'd
be intrested in the results.

Anyone else using something similar to this in bro currently?
Or is everyone 'rolling their own' ??

Cheers,
jason


kong wrote:
> In Bro Manual ,when discuss the "terminate connection (c:
> connection)"  function ,it metioned a "rst utility" can terminate the
> connection.
> 
> where can I find the "rst utility"?
> 
> _______________________________________________
> Bro mailing list
> Bro at ICSI.Berkeley.EDU
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3796 bytes
Desc: S/MIME Cryptographic Signature
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20040813/aca48d58/attachment.bin 


More information about the Bro mailing list