Re: Reverse shell connections

[Peter Bates <peter.bates () ucl ac uk>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Belated reply...

On 23/03/2013 18:34, waldo kitty wrote:
> On 3/23/2013 11:23, Aisling Brennan wrote:
> > Is there a signature in Languardian that detects reverse shell
> > connections? If so how do I run a report to see this activity?
>
> what is Languardian?

Languardian is a commercial product based on Snort.

I do sometimes ponder if people working on commercial products
do lurk around on these lists... (not that I look on LinkedIn or
anything).

- -- 
Peter Bates
Senior Information Security Officer  Phone: +44(0)2076792049
Information Services Division        Internal Ext: 32049
University College London
London WC1E 6BT
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJRVDPfAAoJELhVoVpEMS6RrtoH/jUVC8Xy9EqFNhgH/5TQ1Q1O
O/izLb6HCNsZY/+QR5ZL3DCF9a/m3ypPuIv+TgoIYecZJNKwVgaZtm64P5zAqUU1
y85xk6K6IpSCNMm9s5LlhZLPTZVCG71KQvAYmoebs9oLGM1ChMlOQCAMejFj9ae1
b82T7L80TrXWvE6jvVOcPw/Y7IKuYzvwQabMpyRDhEgYHJl/Vxioufbud9B7Z0Xk
12fe/YunrxGlOcVhHt0e4+2aJB8EOXhLJ+ymM5fM3EAc6h1cCPXKLcK/UTOvOn4Z
4MsVsORrJnAHMtWN+B5ojFyd6TxvLAG5YAk3HyFZY1z7+7Af5E0dBrgHgdA4tXU=
=rkJ9
-----END PGP SIGNATURE-----


------------------------------------------------------------------------------
Own the Future-Intel(R) Level Up Game Demo Contest 2013
Rise to greatness in Intel's independent game demo contest. Compete 
for recognition, cash, and the chance to get your game on Steam. 
$5K grand prize plus 10 genre and skill prizes. Submit your demo 
by 6/6/13. http://altfarm.mediaplex.com/ad/ck/12124-176961-30367-2
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!