RE: Protocol Anomaly Detection IDS - Honeypots

From: Rob Shein <shoten(at)starpower.net>
Date: Fri Feb 21 2003 - 15:45:57 EST

Yeah, but if you have more than one LDAP server, and replication, you'll also snag other valid traffic that happens to control the objects in LDAP.

> -----Original Message-----
> From: Jordan K Wiens [mailto:jwiens@nersp.nerdc.ufl.edu]
> Sent: Friday, February 21, 2003 3:13 PM
> To: Rob Shein
> Cc: 'Augusto Paes de Barros'; focus-ids@securityfocus.com
> Subject: RE: Protocol Anomaly Detection IDS - Honeypots
>
>
> The point seems to be that it's possible to be eblow-deep in

---

Does your IDS have Intelligent Attack Profiling? If not, see what you're missing.
Download a free 15-day trial of StillSecure Border Guard. http://www.securityfocus.com/stillsecure Received on Fri Feb 21 16:33:12 2003