Re: Can snort detect covert channels?

[Richard Bejtlich <taosecurity () gmail com>]

On Sun, Oct 4, 2009 at 12:05 PM, Mouza Al-Nayeli
<mouza.alnayeli () gmail com> wrote:
> Thanks Richard for the encouraging response. This is my first time to use
> snort, and if there is no chance that it might help me in my work, then I
> wouldn't bother myself looking through the tons of documentation.
>
> The mailing list purpose is to provide help and if there is anyone that's
> not willing to do so shall not reply.

You're welcome.  Here's more advice: "tons of documentation" is the
answer, not the problem.

Read the user's guide:

http://www.snort.org/assets/120/snort_manual.pdf

Then read this directory.

http://cvs.snort.org/viewcvs.cgi/snort/doc/

If you can't answer your own question after reading those documents,
then no one on this list is going to be able to help you.

Sincerely,

Richard

------------------------------------------------------------------------------
Come build with us! The BlackBerry&reg; Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9&#45;12, 2009. Register now&#33;
http://p.sf.net/sfu/devconf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users