Dailydave mailing list archives
RE: Dreaming of Summer
From: "Brass, Phil (ISS Atlanta)" <PBrass () iss net>
Date: Tue, 9 Dec 2003 18:00:11 -0500
And I *believe* (though I stand to be corrected on this) that some of the gigabit sensors are built on modified NIC drivers, so shimming below them might be a problem.
On a side-note, the problem with modifying the packet capture engine is knowing which one they are using. If you just mean inserting a shim in the stack, then you run into problems of ensuring you are capture packets below the IDS so that you can remove the ones you don't want it to see.
_______________________________________________ Dailydave mailing list Dailydave () lists immunitysec com http://www.immunitysec.com/mailman/listinfo/dailydave
Current thread:
- Re: Dreaming of Summer, (continued)
- Re: Dreaming of Summer Dave Aitel (Dec 06)
- Re: Dreaming of Summer David Maynor (Dec 06)
- RE: Dreaming of Summer Halvar Flake (Dec 09)
- RE: Dreaming of Summer David Maynor (Dec 07)
- RE: Dreaming of Summer Halvar Flake (Dec 09)
- RE: Dreaming of Summer David Maynor (Dec 07)
- RE: Dreaming of Summer The Dark Tangent (Dec 09)