RE: [Snort-sigs] Payload

From: Andrew Hintz \(Drew\) <drew(at)overt.org>
Date: Thu Feb 27 2003 - 01:00:28 EST

The best thing I'm aware of is arachNIDS <http://www.whitehats.com/ids/>. It has packet dumps of many different attacks. Many of the Snort sigs reference arachNIDS.

On a side note, bmc has requested pcap for the Snort sigs, but I'm not sure what he's doing with it or if he has received any submissions <http://www.snort.org/snort-db/help.html>.

> -----Original Message-----

This SF.net email is sponsored by: Scholarships for Techies! Can't afford IT training? All 2003 ictp students receive scholarships. Get hands-on training in Microsoft, Cisco, Sun, Linux/UNIX, and more. www.ictp.com/training/sourceforge.asp

Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs Received on Thu Feb 27 01:53:15 2003

This message: [ Message body ]
Next message: bmc(at)snort.org: "[Snort-sigs] snort-rules CURRENT update @ Thu Feb 27 06:25:07 2003"
Previous message: Schmehl, Paul L: "RE: [Snort-sigs] Sid:1845 IMAP list overflow attempt"
Maybe in reply to: Michael.Advani(at)Asia.ING.com: "[Snort-sigs] Payload"
In reply to Steve Wray: "RE: [Snort-sigs] Re: [Snort-users] Stopping outbound Kazaa [snort-users-admin@lists.sourceforge.net in Pass-Through List] ['snort' in Pass-Through List] ['snort-users' in Pass-Through List]"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ] [ By messages with attachments ]

This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 14:08:25 EDT