Re: NetBios Names

["ed.davis" <ed.davis () divine com>]

it is very easy to dump the
wins database to text file,
then write a perl script that
will match IP's with a name

just write a perl script and 
run your snort output through it

jus an idea
----- Original Message ----- 
From: "Brian Ertel" <bsertel () amherst edu>
To: "'Fyodor'" <fygrave () tigerteam net>
Cc: "Snort (E-mail)" <snort-users () lists sourceforge net>
Sent: Monday, December 10, 2001 11:13 AM
Subject: RE: [Snort-users] NetBios Names


> Thank you Fyodor.
>
>
>
> ----------------------------------
> Brian Ertel
> Systems & Networking
> Amherst College
> Voice: 413-542-8320
> Fax:    413-542-2626
> bsertel () amherst edu
> ----------------------------------
>
>
> -----Original Message-----
> From: Fyodor [mailto:fygrave () tigerteam net]
> Sent: Monday, December 10, 2001 7:55 AM
> To: Brian Ertel
> Subject: Re: [Snort-users] NetBios Names
>
>
> those have to be looked up.
>
> On Mon, Dec 10, 2001 at 10:16:19AM -0500, Brian Ertel wrote:
> > Hello All,
> >
> > Does anyone know how to config Snort to return
> > NetBios names of offenders.  It is obviose how to
> > get the IP, and MAC addresses, but I haven't seen
> > anything on getting the NetBios name?
> >
> > Regards,
> >
> > Brian
> >
> > ----------------------------------
> > Brian Ertel
> > Systems & Networking
> > Amherst College
> > Voice: 413-542-8320
> > Fax:    413-542-2626
> > bsertel () amherst edu
> > ----------------------------------
> >
> >
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
> -- 
> http://www.notlsd.net
> PGP fingerprint = 56DD 1511 DDDA 56D7 99C7  B288 5CE5 A713 0969 A4D1
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users