Snort mailing list archives
Re: snort telnet login alert
From: waldo kitty <wkitty42 () windstream net>
Date: Sun, 07 Sep 2014 11:56:08 -0400
On 9/7/2014 5:41 AM, Виталий Щетинин wrote:
Hello. I need to alert telnet login and password. How can I do it with snort? I have write a dynamic rule but it doesnt work for all telnet configuration. Is there some different method?
please be more specific... telnet is port 23... what do you mean by your rule not working for all telnet configs? what does your rule look like? -- NOTE: No off-list assistance is given without prior approval. Please *keep mailing list traffic on the list* unless private contact is specifically requested and granted. ------------------------------------------------------------------------------ Slashdot TV. Video for Nerds. Stuff that matters. http://tv.slashdot.org/ _______________________________________________ Snort-sigs mailing list Snort-sigs () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-sigs http://www.snort.org Please visit http://blog.snort.org for the latest news about Snort!
Current thread:
- snort telnet login alert Виталий Щетинин (Sep 07)
- Re: snort telnet login alert waldo kitty (Sep 07)
- Re: snort telnet login alert Виталий Щетинин (Sep 07)
- Re: snort telnet login alert lists () packetmail net (Sep 07)
- Re: snort telnet login alert Joel Esler (jesler) (Sep 07)
- Re: snort telnet login alert Shirkdog (Sep 07)
- Re: snort telnet login alert Виталий Щетинин (Sep 07)
- Re: snort telnet login alert Виталий Щетинин (Sep 07)
- Re: snort telnet login alert waldo kitty (Sep 07)