Snort mailing list archives
RE: Passive OS Detection
From: "Jyri Hovila" <jyri.hovila () iki fi>
Date: Tue, 18 Sep 2001 23:39:04 +0300
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi!
Has anyone given any thought to adding passive OS detection as a reporting option - either through Snort directly, or perhaps as an option in ACID?
I think this is an excellent idea, definitely worth doing. IMO ACID would be the right place to implement it; that way Snort logging would not become any heavier. Are there any ACID developers on the list? - - Jyri -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com> iQA/AwUBO6ew58nOVLzFbXXeEQIL6gCfXVFsvBed9R4yIfEBbGAvwGALMqIAoKPq 5XLi6+fSRfWknkq2YJNSd8sL =t14f -----END PGP SIGNATURE----- _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Passive OS Detection Joshua Wright (Sep 18)
- RE: Passive OS Detection Jyri Hovila (Sep 18)