In Bro Manual ,when discuss the "terminate connection (c:
connection)" function ,it metioned a "rst utility" can terminate the
connection.
where can I find the "rst utility"?
I'm not sure about the 'rst utility', but I think you
can use hping2 (http://www.hping.org) instead. (if you
don't want to code your own 
I believe that something along the lines of:
hping2 -R --tcpseq seqnum -s srcport -d dstport -a srchost dsthost
or some such should work, you'll have to play with it, but I'd
be intrested in the results.
Anyone else using something similar to this in bro currently?
Or is everyone 'rolling their own' ??
Cheers,
jason
kong wrote: