[Snort-inline-users] Re: Snort_inline restart & existing sessions

[Will M. <wil...@gm...>]

you probably just want to get rid of enforce_state, if you enable
midstream_drop_alerts you could vulnerable to snot/stick attacks.

Regards,

Will

On 1/21/06, ni...@el... <ni...@el...> wrote:
> Hi,
>
> Is there any way to disable Traffic-Drop for existing connections when
> snort_inline restarts ????
>                I think one way is to use stream4inline without
> enforce_sate option & enabling midstream_drop_alerts
> option.... is it advisable ??
>
> Regards,
> Nishit Shah.
>