Snort mailing list archives

Re: arpspoof verbose output in 2.0?


From: Jeff Nathan <jeff () snort org>
Date: Wed, 28 May 2003 18:56:48 -0700

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I sent Chris a patch to add verbose output to arpspoof for your type of 
deployment (instances where unified alerting isn't used).

I will ask him again to commit it.

- -Jeff


- --On Friday, May 23, 2003 13:22 -0400 "Arey, Jeff"
<jeffrey.arey () telos com> 
wrote:



I was wondering if the current version of snort (2.0) offers a more
verbose output for arpspoof "hits"?  I have seen 3 or 4 arpsoof alerts to
my syslog, but I am not currently using any of the database plugins.  I
saw a patch mentioned in earlier versions concerning this.  I am learning
so much about our LAN traffic- not just IDS stuff,  butICMP unreachables
and the like.  A special thanks to all of the snort developers for waking
me up!



Jeff Arey

Sr. Network Eng.,

Telos Corporation



- --
http://cerberus.sourcefire.com/~jeff       (gpg key available)
Great spirits have always encountered violent opposition from mediocre
minds.
- - Albert Einstein
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (Darwin)

iD8DBQE+1WjkEqr8+Gkj0/0RArQHAJ4h3m+35gEZLwkfR2N20ds2NUoIrACgpuHm
Vn5pxFGTj836+6+1Phl3syM=
=QwCd
-----END PGP SIGNATURE-----



-------------------------------------------------------
This SF.net email is sponsored by: eBay
Get office equipment for less on eBay!
http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: