Snort mailing list archives
Re: Blackhole exploit kit...not so GREat...
From: Balasubramaniam Natarajan <bala150985 () gmail com>
Date: Tue, 20 Nov 2012 11:10:31 -0500
On Mon, Nov 19, 2012 at 11:55 AM, Lay, James <james.lay () wincofoods com>wrote:
Hey all!**** ** ** Investigating this morning’s naughtiness got me some interesting things:** ** ** ** **** ** ** And:**** ** ** **** ** ** Looks like BHEK is opening up a GRE tunnel to funnel it’s goods…haven’t seen this before, so thought you’d wanna know.**** ** ** James****
The snort manual says that snort cannot work with GRE protocol, how to find out this infection if a person get infected outside the network where snort is monitoring ? -- Regards, Balasubramaniam Natarajan www.blog.etutorshop.com
------------------------------------------------------------------------------ Monitor your physical, virtual and cloud infrastructure from a single web console. Get in-depth insight into apps, servers, databases, vmware, SAP, cloud infrastructure, etc. Download 30-day Free Trial. Pricing starts from $795 for 25 servers or applications! http://p.sf.net/sfu/zoho_dev2dev_nov
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Blackhole exploit kit...not so GREat... Lay, James (Nov 20)
- Re: Blackhole exploit kit...not so GREat... Balasubramaniam Natarajan (Nov 21)
- Re: Blackhole exploit kit...not so GREat... Joel Esler (Nov 21)
- Re: Blackhole exploit kit...not so GREat... Balasubramaniam Natarajan (Nov 21)