Re: Snort and IM

[waldo kitty <wkitty42 () windstream net>]

On 2/18/2013 15:41, Josh Bitto wrote:
> oO I didn’t know teamspeak used ssl….ok that explains a lot….
>
> Thank you!
>
> I’m wondering why they created a rule set for tcp if the standard is in ssl….

because TS used to travel in the plain clothes...

FWIW: one can still capture SSL and similar traffic... however, it requires 
playing MitM (Man in the Middle) which means additional software and hoops to 
play with ;)



------------------------------------------------------------------------------
The Go Parallel Website, sponsored by Intel - in partnership with Geeknet, 
is your hub for all things parallel software development, from weekly thought 
leadership blogs to news, videos, case studies, tutorials, tech docs, 
whitepapers, evaluation guides, and opinion stories. Check out the most 
recent posts - join the conversation now. http://goparallel.sourceforge.net/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!