[Snort-sigs] DNS poisoning

From: Vincent Vono <vincent.vono(at)zurichna.com>
Date: Tue May 27 2003 - 12:00:52 EDT

Hi all,

Anyone have a rule (or does one exist) to detect DNS poisoning attempts? I've checked the default DNS rules of snort, but do not see one.

Many thanks,
Vince Vono

• PLEASE NOTE ******************* This E-Mail/telefax message and any documents accompanying this transmission may contain privileged and/or confidential information and is intended solely for the addressee(s) named above. If you are not the intended addressee/recipient, you are hereby notified that any use of, disclosure, copying, distribution, or reliance on the contents of this E-Mail/telefax information is strictly prohibited and may result in legal action against you. Please reply to the sender advising of the error in transmission and immediately delete/destroy the message and any accompanying documents. Thank you.

  ---

This SF.net email is sponsored by: ObjectStore. If flattening out C++ or Java code to make your application fit in a relational database is painful, don't do it! Check out ObjectStore. Now part of Progress Software. http://www.objectstore.net/sourceforge

---

Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs Received on Tue May 27 13:05:36 2003