IDS mailing list archives
SourceFire RNA
From: Lior Tal <lior () us-path com>
Date: 2 Dec 2003 10:58:20 -0000
Hi, Did anyone had a chance to evaluate the RNA published on SourceFire web site?
From what I coule understand, they claim that by passive traffic analysis the RNA can trace every network device, service and open port within a network. It is difficult for me to understand how can passive traffic analysis detect inactive devices and services which do not transmit any network traffic?
Can anyone help figure that one? Lior US-Path Inc. --------------------------------------------------------------------------- ---------------------------------------------------------------------------
Current thread:
- SourceFire RNA Lior Tal (Dec 02)
- RE: SourceFire RNA Rob Shein (Dec 02)
- Re: SourceFire RNA Renaud Deraison (Dec 02)
- RE: SourceFire RNA Rob Shein (Dec 02)
- Re: SourceFire RNA Renaud Deraison (Dec 02)
- RE: SourceFire RNA Rob Shein (Dec 02)
- RE: SourceFire RNA Lior Tal (Dec 03)
- Re: SourceFire RNA Martin Roesch (Dec 03)
- Re: SourceFire RNA Renaud Deraison (Dec 02)
- RE: SourceFire RNA Rob Shein (Dec 02)
- Re: SourceFire RNA Jason (Dec 03)
- Re: SourceFire RNA Renaud Deraison (Dec 03)
- Re: SourceFire RNA Jason (Dec 03)