RE: brut force attack not detected

["Franki" <frankieh () vianet net au>]

Hi everyone,,

I have a non configurable 8 port switch that we use for just a section that
we seperate from the rest of our network,,

How would I set that up to work as a monitor port?


rgds

Frank

-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net]On Behalf Of John
Berkers
Sent: Thursday, 26 July 2001 9:02 PM
To: 'Anthony Geoffron'; snort-users () lists sourceforge net
Subject: RE: [Snort-users] brut force attack not detected


At the risk of sounding repetative (this has been discussed a few times on
this list), is your snort box plugged into a switch?  If so, make sure the
port is configured as a monitor port.

Also, what exactly is a "brute force" attack.  Do you know if it actually
matches one of the signatures?

Regards,

John Berkers
berjo () ozemail com au


-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net]On Behalf Of Anthony
Geoffron
Sent: Thursday, 26 July 2001 16:23
To: snort-users () lists sourceforge net
Subject: [Snort-users] brut force attack not detected



I installed snort 1.8 release
everything 's working great
but. When I'm doing a brut force attack on my server nothing
is detected.
I installed the last rules available on snort.org
since it's a basic attack I was thinking it would have been coverer with
one of the rules.
Am I missing something?

thks Anthony.

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users