Snort mailing list archives
Re: Snort and DPI
From: Kevin Ross <kevross33 () googlemail com>
Date: Thu, 2 Aug 2012 15:59:49 +0100
To answer your questions: - Yes it is DPI as it is looking at the full packet. - If it is your network an you have the appropriate security and network usage policies in place you are able to capture whatever you want. Sure Snort is aimed more at security stuff but you can match on all cleartext traffic (technically you could go a full packet capture and get everything which from a security point of view is advisable). Kevin On 2 August 2012 12:21, Pratik Narang <pratik.cse.bits () gmail com> wrote:
Dear Snort Users and Developers, Snort's detection engine searches for specific signatures in the payload of IP packets. So is it right to equate Snort's detection with Deep Packet Inspection? So are there ethical/privacy issues involved with Snort's detection run as well? Thanks... ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Snort and DPI Pratik Narang (Aug 02)
- Re: Snort and DPI Kevin Ross (Aug 02)