Re: Newbie questions, Snort on NT, stealth mode vs react/flexresp

[Dragos Ruiu <dr () kyx net>]

On October 9, 2002 08:23 pm, Dave Thornburgh wrote:
> John -
>
> Thanks for the file.  In the extracted folder I've got (the NT version),
> there is absolutely NO documentation.
>
> Everyone else:
>
> While John did get me the M to RTF, it is extremely sparse, and doesn't
> begin to address the interaction of flexresp with stealth sniffing.  Is
> anybody out there using it yet?  Or, from another angle, does anybody know
> if it's possible to transmit packets from an interface that has no IP
> address assigned?

Interesting question. If you are using a tap it's not possible AFAIK
Prolbably depends on specific investigation of the "stealth" tap tho.

Check the FAQ. Download the source tarball with docs.

cheers,
--dr

-- 
dr () kyx net   pgp: http://dragos.com/kyxpgp
Advance CanSecWest/03 registration available: http://cansecwest.com
"The question of whether computers can think is like the question
  of whether submarines can swim." --Edsger Wybe Dijkstra 1930-2002



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users