RE: [Snort-devel] New Feature based on MAC address filterig (Poss ible !!!!!)

From: Rich Adamson <radamson(at)routers.com>
Date: Wed Jun 18 2003 - 10:54:47 EDT

> Yes, arpwatch and snort can coexist (or at least have on all of the versions

If your Windows systems are passing userid's and passwords via broadcast packets, best go fix those systems. (Those are actually passed in directed sessions, making it near impossible to sniff the required data without access to switch-based port mirroring functions, a hub, etc.)

---

This SF.Net email is sponsored by: INetU Attention Web Developers & Consultants: Become An INetU Hosting Partner. Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission! INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php

---

Snort-devel mailing list
Snort-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-devel Received on Wed Jun 18 10:15:27 2003