Re: Snort-sigs Digest, Vol 109, Issue 19

["Al Lewis (allewi)" <allewi () cisco com>]

When you say “DAD” are you speaking of duplicate address detection?

Do you have a pcap of the attack?

Albert Lewis
QA Software Engineer
SOURCEfire, Inc. now part of Cisco
9780 Patuxent Woods Drive
Columbia, MD 21046
Phone: (office) 443.430.7112
Email: allewi () cisco com

From: syazareen [mailto:syazareen () yahoo com]
Sent: Saturday, June 27, 2015 4:38 AM
To: snort-sigs () lists sourceforge net
Subject: Re: [Snort-sigs] Snort-sigs Digest, Vol 109, Issue 19

Actually my project title is detecting DAD attack using snort. snort is installed in windows. DAD attack i've tried 
using THC Toolkit and it's worked. The problem now is with Snort. I do not know how to configure the rule to detect DAD 
attack in windows snort. Can you help me?


On Friday, June 26, 2015 8:03 PM, "snort-sigs-request () lists sourceforge net<mailto:snort-sigs-request () lists 
sourceforge net>" <snort-sigs-request () lists sourceforge net<mailto:snort-sigs-request () lists sourceforge net>> 
wrote:

Send Snort-sigs mailing list submissions to
    snort-sigs () lists sourceforge net<mailto:snort-sigs () lists sourceforge net>

To subscribe or unsubscribe via the World Wide Web, visit
    https://lists.sourceforge.net/lists/listinfo/snort-sigs
or, via email, send a message with subject or body 'help' to
    snort-sigs-request () lists sourceforge net<mailto:snort-sigs-request () lists sourceforge net>

You can reach the person managing the list at
    snort-sigs-owner () lists sourceforge net<mailto:snort-sigs-owner () lists sourceforge net>

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Snort-sigs digest..."


Today's Topics:

  1. Re: need help (lists () packetmail net<mailto:lists () packetmail net>)


----------------------------------------------------------------------

Message: 1
Date: Thu, 25 Jun 2015 19:12:19 -0500
From: "lists () packetmail net<mailto:lists () packetmail net>" <lists () packetmail net<mailto:lists () packetmail 
net>>
Subject: Re: [Snort-sigs] need help
To: "snort-sigs () lists sourceforge net<mailto:snort-sigs () lists sourceforge net>"
    <snort-sigs () lists sourceforge net<mailto:snort-sigs () lists sourceforge net>>
Message-ID: <558C98E3.9040601 () packetmail net<mailto:558C98E3.9040601 () packetmail net>>
Content-Type: text/plain; charset="us-ascii"

On 06/25/15 17:58, syazareen wrote:
> I want to test rule for ipv6 but i do not know how to write the rule in ipv6.
> have any suggestion for me? i'm using snort on windows.

Can you explain the objective you are trying to produce?

Cheers,
Nathan




------------------------------

------------------------------------------------------------------------------
Monitor 25 network devices or servers for free with OpManager!
OpManager is web-based network management software that monitors
network devices and physical & virtual servers, alerts via email & sms
for fault. Monitor 25 devices for free with no restriction. Download now
http://ad.doubleclick.net/ddm/clk/292181274;119417398;o

------------------------------

_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net<mailto:Snort-sigs () lists sourceforge net>
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org<http://www.snort.org/>


Please visit http://blog.snort.org <http://blog.snort.org/> for the latest news about Snort!

End of Snort-sigs Digest, Vol 109, Issue 19
*******************************************

------------------------------------------------------------------------------
Monitor 25 network devices or servers for free with OpManager!
OpManager is web-based network management software that monitors 
network devices and physical & virtual servers, alerts via email & sms 
for fault. Monitor 25 devices for free with no restriction. Download now
http://ad.doubleclick.net/ddm/clk/292181274;119417398;o

_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!