Re: snort telnet login alert

[Виталий Щетинин <sch_vitaliy () mail ru>]

 Ok. We can forgot about my rule. How can I alert telnet login?


Sun, 07 Sep 2014 11:56:08 -0400 от waldo kitty <wkitty42 () windstream net>:
> On 9/7/2014 5:41 AM, Виталий Щетинин wrote:
> > Hello. I need to alert telnet login and password. How can I do it with snort? I
> > have write a dynamic rule but it doesnt work for all telnet configuration. Is
> > there some different method?
>
> please be more specific... telnet is port 23... what do you mean by your rule 
> not working for all telnet configs? what does your rule look like?
>
> -- 
>   NOTE: No off-list assistance is given without prior approval.
>         Please *keep mailing list traffic on the list* unless
>         private contact is specifically requested and granted.
>
> ------------------------------------------------------------------------------
> Slashdot TV. 
> Video for Nerds.  Stuff that matters.
> http://tv.slashdot.org/
> _______________________________________________
> Snort-sigs mailing list
> Snort-sigs () lists sourceforge net
> https://lists.sourceforge.net/lists/listinfo/snort-sigs
> http://www.snort.org
>
>
> Please visit  http://blog.snort.org for the latest news about Snort!

------------------------------------------------------------------------------
Slashdot TV.  
Video for Nerds.  Stuff that matters.
http://tv.slashdot.org/

_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!