IDS mailing list archives

Re: Intrusion Detection Evaluation Datasets


From: Paul Schmehl <pauls () utdallas edu>
Date: Thu, 19 Mar 2009 20:30:47 +0000

--On Thursday, March 19, 2009 14:33:29 -0400 Joel Esler <eslerj () gmail com> wrote:

Would this be an appropriate use for byte_test or byte_jump?


That's what I was referring to when I mentioned applications. The problem with http traffic is that it's much more freeform and doesn't lend itself to byte_test and byte_jump type tests.

--
Paul Schmehl (pauls () utdallas edu)
Senior Information Security Analyst
The University of Texas at Dallas
http://www.utdallas.edu/ir/security/

Attachment: _bin
Description:


Current thread: