Snort mailing list archives

re. scan reporter script


From: Andrew Daviel <andrew () andrew triumf ca>
Date: Mon, 7 May 2001 17:42:08 -0700 (PDT)


If anyone actually tried my reporter script
  http://andrew.triumf.ca/pub/security/reporter/
I've made a few small changes (& bugs no doubt).

One relates to the algorithm for choosing a domain to build
an abuse address for - instead of trying to work it out from the TLD
I now start at the TLD+1 and try to find an MX record. This after failing
on xxx.or.kr and xxx.yy.zz.us. Hopefully there are no MX records for
ac.uk, co.jp etc.

I also managed to send mail to IANA (oops) from not filtering LINKLOCAL

-- 
Andrew Daviel, TRIUMF, Canada
Tel. +1 (604) 222-7376
security () triumf ca


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: