Snort mailing list archives
Re: HP Printing
From: Erek Adams <erek () theadamsfamily net>
Date: Wed, 8 May 2002 15:02:53 -0700 (PDT)
On Wed, 8 May 2002, Dan Fiorito wrote:
Has anyone ever attempted to capture data from a client to a print server? I need to search for some key words if possible. Is there anyway to convert PCL gobble gook!
Find out the ports in use. One should be random, one should be static. Then see what 'session: printable'[0] might give you. I'd guess it's going to use a lpd system, so check port 515/tcp. Good luck! ----- Erek Adams Nifty-Type-Guy TheAdamsFamily.Net [0] http://www.snort.org/docs/writing_rules/chap2.html#tth_sEc2.3.18 _______________________________________________________________ Have big pipes? SourceForge.net is looking for download mirrors. We supply the hardware. You get the recognition. Email Us: bandwidth () sourceforge net _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- HP Printing Dan Fiorito (May 08)
- Re: HP Printing Erek Adams (May 08)