Re: Tuning Signatures

[Tod Beardsley <todb () planb-security net>]

AJ Butcher, Information Systems and Computing wrote:
> --On 13 March 2004 20:43 -0500 Jim Terry <jtixthus () excite com> wrote:
> > What is the best document/book/man page to help in this matter? 
> > The Snort Users Manual did not do it for me.
>
> <http://www.insecure.org/stf/smashstack.txt>, probably.

At the risk of wandering OT, you might enjoy the material at:

http://www.nologin.org/main.pl?action=papersList&;

I'm skimming it, and it's written a little clearer than the seminal 
Phrack paper. Also, I'm very optimistic about Shellcoders, here:

http://www.wiley.com/WileyCDA/WileyTitle/productCd-0764544683.html

..given the author roster.

-- 
"It's okay to yell 'fire' in a crowded theater
if the theater is actually on fire."
Tod Beardsley | www.planb-security.net



-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users