RE: Dreaming of Summer

["Brass, Phil (ISS Atlanta)" <PBrass () iss net>]

And I *believe* (though I stand to be corrected on this) that some of
the gigabit sensors are built on modified NIC drivers, so shimming below
them might be a problem.


> On a side-note, the problem with modifying the packet capture 
> engine is knowing which one they are using. If you just mean 
> inserting a shim in the stack, then you run into problems of 
> ensuring you are capture packets below the IDS so that you 
> can remove the ones you don't want it to see.
_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://www.immunitysec.com/mailman/listinfo/dailydave