Re: Snort and SSL

[Rudi Starcevic <rudi () oasis net au>]

Hi Paul,

I'm not sure about Snort and SSL and I look forward to seeing some replies.
If your using Apache you can monitor decrypted SSL using mod_security.

http://www.modsecurity.org/

There are many other excellent features in this module which is so 
simple to install and use.

There's even a script to convert Snort rules into mod_security rules !

I use both Snort and mod_security.

Hope this helps.
Best regards
Rudi.



Sheahan, Paul wrote:

> I was reading some old threads on possibilities of using Snort to monitor SSL traffic using SSLDump and other means. If 
> a hacker is smart and is determined not to get caught, they are going to send their web application attacks using https 
> where possible, so being able to monitor SSL traffic is a must.
>
> Has anyone successfully setup Snort to monitor SSL traffic?
>
>
> Thanks,
> Paul
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: SF.net Giveback Program.
> SourceForge.net hosts over 70,000 Open Source Projects.
> See the people who have HELPED US provide better services:
> Click here: http://sourceforge.net/supporters.php
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list
>
>  




-------------------------------------------------------
This SF.net email sponsored by: Enterprise Linux Forum Conference & Expo
The Event For Linux Datacenter Solutions & Strategies in The Enterprise 
Linux in the Boardroom; in the Front Office; & in the Server Room 
http://www.enterpriselinuxforum.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users