key-logging patterns

[mflyger () mail ewu edu]

Hello all:

Are there any established packet patterns for known key-logging programs (i.e.,
programs which capture keyboard input and, say, broadcast it over port 80 to a
cracker's server)?  We'd love to be able to detect that kind of activity since
we really aren't staffed for scanning interdepartmental users' computers.

Thanx
Michael


-------------------------------------------------
This mail sent through IMP: http://horde.org/imp/



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users