RE: [Snort-sigs] Payload

From: Andrew Hintz \(Drew\) <drew(at)overt.org>
Date: Thu Feb 27 2003 - 01:00:28 EST

The best thing I'm aware of is arachNIDS <http://www.whitehats.com/ids/>. It has packet dumps of many different attacks. Many of the Snort sigs reference arachNIDS.

On a side note, bmc has requested pcap for the Snort sigs, but I'm not sure what he's doing with it or if he has received any submissions <http://www.snort.org/snort-db/help.html>.

> -----Original Message-----

---

This SF.net email is sponsored by: Scholarships for Techies! Can't afford IT training? All 2003 ictp students receive scholarships. Get hands-on training in Microsoft, Cisco, Sun, Linux/UNIX, and more. www.ictp.com/training/sourceforge.asp

---

Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs Received on Thu Feb 27 01:53:15 2003