[Bro] Can bro be act as an IPS?

[Kyle Cosmo]

That still doesn't make Bro an IPS though. An IPS blocks 
malicious traffic itself. Reconfiguring a nearby router after 
the original malicious traffic went through doesn't do any good
if the goal is to stop the initial malicious session. It is useful though...
especially for machines infected with worms that generate a lot of traffic.

Kyle

> Hi,
> starting with:
> http://www.bro-ids.org/bro-workshop-2007/slides/Bro-IPS.pdf
> Regards
> Rmkml
> 
> 
> On Tue, 11 Mar 2008, wengwenxiang wrote:
> 
> > Date: Tue, 11 Mar 2008 10:35:02 +0800
> > From: wengwenxiang <wwxxmu at hotmail.com>
> > To: bro at bro-ids.org
> > Subject: [Bro] Can bro be act as an IPS?


_________________________________________________________________
Shed those extra pounds with MSN and The Biggest Loser!
http://biggestloser.msn.com/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20080311/42a68845/attachment.html