Honeypots mailing list archives
Re: any other tool to detect worm?
From: James Riden <j.riden () massey ac nz>
Date: Sun, 02 May 2004 21:56:30 +1200
dcneting <ansiry () tm net my> writes:
is there any tools that i can use to just detect worm-like activity besides that using honeyd? if there is, how can i use it to detect worms(known and unknown) preferably open source platform.
A lot of worms will show up in snort - via signatures (e.g Welchia) or they will appear in the portscan.log file (e.g. Blaster). cheers, Jamie -- James Riden / j.riden () massey ac nz / Systems Security Engineer GPG public key available at: http://www.massey.ac.nz/~jriden/ This post does not necessarily represent the views of my employer.
Current thread:
- any other tool to detect worm? dcneting (May 01)
- Re: any other tool to detect worm? bugtraq (May 01)
- Re: any other tool to detect worm? James Riden (May 02)
- RE: any other tool to detect worm? Bojan Zdrnja (May 08)
- Re: any other tool to detect worm? Niels Provos (May 08)
- RE: any other tool to detect worm? Dan Hawrylkiw (May 13)
- Final Year Project Ideas Reena Pau (May 13)
- <Possible follow-ups>
- RE: any other tool to detect worm? Taylor, David (May 02)