Snort mailing list archives
Re: Detecting Skype traffic (reliably)
From: Nigel Houghton <nigel () sourcefire com>
Date: Wed, 25 Oct 2006 21:04:03 -0500
On 0, Andrew Hay <andrewsmhay () gmail com> wrote:
Has anyone, in practice...not in theory, been able to create and validate a snort signature that is able to classify Skype traffic? I've been researching for days and am having a hard time. I know that TippingPoint has a way of classifying (and blocking) Skype traffic but from what I hear they don't appear to be sharing the 'secret sauce'. Any input would be greatly appreciated.
What do you mean by "classifying Skype traffic" exactly? Did you look at the following sids: 5692 5693 5694 5998 5999 6000 6001 +--------------------------------------------------------------------+ Nigel Houghton Research Engineer Sourcefire Inc. Vulnerability Research Team There is no theory of evolution, just a list of creatures Vin Diesel allows to live. ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Detecting Skype traffic (reliably) Andrew Hay (Oct 24)
- Re: Detecting Skype traffic (reliably) Paul Halliday (Oct 24)
- Re: Detecting Skype traffic (reliably) Jason Haar (Oct 25)
- Re: Detecting Skype traffic (reliably) Nigel Houghton (Oct 25)
- <Possible follow-ups>
- Re: Detecting Skype traffic (reliably) Michael Scheidell (Oct 24)
- Re: Detecting Skype traffic (reliably) Humes, David G. (Oct 25)
- Re: Detecting Skype traffic (reliably) baginski (Oct 25)
- Re: Detecting Skype traffic (reliably) Nicolas Saurbier (Oct 26)