IDS mailing list archives
Re: IM & P2P packets
From: Eric Hines <eric.hines () appliedwatch com>
Date: Sun, 04 Dec 2005 18:07:46 -0600
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Ahmad, Your best bet would be to get approval to deploy some Snort IDS sensors on some switch span ports or preferably, Taps and go to www.bleedingsnort.com and download the Bleeding Edge P2P rules.. They are phenomenal in detecting Limewire, Kazaa, etc traffic on a network.. To eliminate other noise except P2P alerts, comment out all the other rulesets. Best Regards, Eric Hines, GCIA, CISSP CEO, President Applied Watch Technologies, LLC - --------------------------------------------- Eric Hines, GCIA, CISSP CEO, President Applied Watch Technologies, LLC 1095 Pingree Road Suite 213 Crystal Lake, IL 60014 Toll Free: (877) 262-7593 ext:327 Direct: (847) 854-2725 ext:327 Fax: (847) 854-5106 Web: http://www.appliedwatch.com Email: eric.hines () appliedwatch com - -------------------------------------------- "Enterprise Open Source Security Management" ahmad mubarak wrote:
hi all i am new in infoSec field so my boss asked me to give him a list of IM and P2P users in our network i searched the Internet to find any tool to help in this task but no result so is there any one can help !!! to achieve this task ideas , tools , procedures will appreciated thanx ------------------------------------------------------------------------ Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more. ------------------------------------------------------------------------
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDk4SobOqF2QHgUK0RAl5UAKDGB1Q3t4HWG28dUHEjcIBII7q2lgCfSqGZ bbVlc1KFT24yumoQQssDMlw= =Z39v -----END PGP SIGNATURE----- ------------------------------------------------------------------------ Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more. ------------------------------------------------------------------------
Current thread:
- IM & P2P packets ahmad mubarak (Dec 02)
- Re: IM & P2P packets Blake Hartstein (Dec 05)
- IDS for wireless sensor network Zhenwei Yu (Dec 10)
- RE: IDS for wireless sensor network Chris Serafin (Dec 12)
- IDS for wireless sensor network Zhenwei Yu (Dec 10)
- Re: IM & P2P packets Lachlan Bowes (Dec 05)
- RE: IM & P2P packets net shark (Dec 10)
- Re: IM & P2P packets Joel Esler (Dec 10)
- Re: IM & P2P packets Fco. Jose Garrido Matamoros (Dec 05)
- Re: IM & P2P packets Eric Hines (Dec 05)
- Re: IM & P2P packets Eric Grejda (Dec 05)
- Re: IM & P2P packets Blake Hartstein (Dec 05)