Snort mailing list archives
Re: Interesting
From: Joel Esler <jesler () sourcefire com>
Date: Tue, 11 Dec 2012 20:33:04 -0500
We're looking into it as well. Sorry I haven't responded sooner. -- Joel Esler Sent from my iPhone On Dec 11, 2012, at 5:02 PM, "Lay, James" <james.lay () wincofoods com> wrote:
Thanks Elz…nice to know someone is looking at it J James From: beenph [mailto:beenph () gmail com] Sent: Tuesday, December 11, 2012 10:10 AM To: Lay, James Cc: snort-users () lists sourceforge net Subject: Re: [Snort-users] Interesting On Tue, Dec 11, 2012 at 9:59 AM, Lay, James <james.lay () wincofoods com> wrote:http://code.google.com/p/topera/ “invisible to snort”Seem's like its only chaining IPv6 IPv6 Extension Header - Destination Options Header Using scrapy. ipeh = IPv6ExtHdrDestOpt()/IPv6ExtHdrDestOpt()/IPv6ExtHdrDestOpt()/IPv6ExtHdrDestOpt()/IPv6ExtHdrDestOpt()/IPv6ExtHdrDestOpt()/IPv6ExtHdrDestOpt()/IPv6ExtHdrDestOpt()/IPv6ExtHdrDestOpt() And the tool should trigger DecoderEvent(p, DECODE_IP6_EXCESS_EXT_HDR, DECODE_IP6_EXCESS_EXT_HDR_STR, 1, 1); #define IP6_EXTMAX 8 ;) -elz ------------------------------------------------------------------------------ LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial Remotely access PCs and mobile devices and provide instant support Improve your efficiency, and focus on delivering more value-add services Discover what IT Professionals Know. Rescue delivers http://p.sf.net/sfu/logmein_12329d2d _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
------------------------------------------------------------------------------ LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial Remotely access PCs and mobile devices and provide instant support Improve your efficiency, and focus on delivering more value-add services Discover what IT Professionals Know. Rescue delivers http://p.sf.net/sfu/logmein_12329d2d
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Interesting Lay, James (Dec 11)
- Re: Interesting beenph (Dec 11)
- Re: Interesting Lay, James (Dec 11)
- Re: Interesting Joel Esler (Dec 11)
- Re: Interesting Lay, James (Dec 11)
- Re: Interesting beenph (Dec 11)