Snort mailing list archives

Re: Test Snort with real attacks\packets


From: Richard Bejtlich <taosecurity () gmail com>
Date: Sun, 8 Feb 2009 15:19:27 -0500

Hello,

http://www.google.com/search?q=how+to+test+snort

First result:

http://searchsecuritychannel.techtarget.com/tip/0,289483,sid97_gci1266313,00.html

Without registration:

http://searchsecuritychannel.techtarget.com/tip/0,289483,sid97_gci1266313_mem1,00.html

Sincerely,

Richard

On Sun, Feb 8, 2009 at 4:18 AM, Itay Dagan <itay () yoggie com> wrote:
Hi
I need an advise with Snort testing ...

I am interested on checking my snort in the best way that I can.

I have a my own environment for  snort
which I add rules of my own etc.

At first I was trying to use sneeze in order to check all the rules

My first Q is :
Is it possible to use sneeze from a different PC in the network ? (in snort ver 2.4-2.8)
I tried it but it seems sneeze doesn't create any packets.
Maybe sneeze is for older snort versions ?


My second Q is :
Is there a site or a data base that contains links to Snort attacks so I can check my environment ?
It can be really nice to create a "Lab" for snort that checkes all sort of real attacks

appreciate your help

Itay

------------------------------------------------------------------------------
Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM)
software. With Adobe AIR, Ajax developers can use existing skills and code to
build responsive, highly engaging applications that combine the power of local
resources and data with the reach of the web. Download the Adobe AIR SDK and
Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


------------------------------------------------------------------------------
Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM)
software. With Adobe AIR, Ajax developers can use existing skills and code to
build responsive, highly engaging applications that combine the power of local
resources and data with the reach of the web. Download the Adobe AIR SDK and
Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: