[Snort-devel] stateful table for wireless attack detection tools

From: Sebastien GRACIA <sgracia(at)wanadoo.fr>
Date: Thu Feb 26 2004 - 11:33:49 EST

Dear all,  

I'm currently working on implementing some specific wireless attack detection tools for snort.
Consequently, I really feel interested with your works.  

To summarized I'm working on elaborating a data recording stateful table used by dedicated wireless preprocessors.
The index of this table will be "MAC address hash" based.  

Data recorded will depend on some dedicated preprocessors activated through snort.conf file.  

At the moment, I have partly implemented the "stateful table" part and a desauthentification flood preprocessor using it. Both should be finished next week... I hope so at least.  

A MAC spoofing detection preprocessor should follow.  

If you are interesting with this, feel free to contact me. It would be a pleasure to submit my work to you.  

Sincerelly,
Sébastien.  

---

SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id56&alloc_id438&opick

---

Snort-devel mailing list
Snort-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-devel Received on Thu Feb 26 12:01:00 2004