Re: How to log PPP (ssh - VPN Installation) packets using snort

[Erek Adams <erek () theadamsfamily net>]

On Mon, 4 Mar 2002, Sameer wrote:

> Well i want to log in ssh and ppp packets using snort , can any one help me
> by telling how to log such "ppp/ssh protocol" packets inclusive of header
> and payload

You can't.

SSH is _encrypted_ from the endpoints.  IOW, all you'll get is garbage if you
try to examine the packets.  That's why it's such a wonderful utility!  :)

Sorry to be the bearer of bad news!  Cheers!

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users