Re: Using snort to detect if your users are doing interesting things?

[Jeroen Massar <jeroen () unfix org>]

On Thu, 2005-06-09 at 23:29 +0300, Kim Onnel wrote:
> How about project Darknet and sinkholes and monitoring dark ip space,
> worms and botnets usually scans blindly right and left, so there is a
> good chance you will get a glimpse on infected hosts if thats what you
> want, i catch infected hosts by looking at apache access logs and i
> see alot of scans,

Read the following interesting article:
http://www.spectrum.ieee.org/WEBONLY/publicfeature/may05/0505worm.html

Greets,
 Jeroen

Attachment: signature.asc
Description: This is a digitally signed message part