Re: snort rules

[Phillip Bailey <pbailey () cryptolife org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Dear Sir,

In order to detect a man in the middle attack, you need to detect
arp poisoning in your network, please take a look to ARP Spoof
Preprocessor in the snort manual.

In the meantime my best regards,

Phillip



On 06/17/2010 07:10 AM, Nayan Jyoti Das wrote:
> Hi all,
>
>          I want to know snort rule to detect man in the middle. So plz give
> me the rule in short and in simple so that i understand in ease..........
>
> Thanks..........

- -- 
(SPSA) Snorby Preconfigured Security Applications web page
http://www.cryptolife.org/index.php/Spsa
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAEBAgAGBQJMGkf8AAoJEA7gvUj6rk0Z4F4H/14WGoQSUNwyg79kJsBX765Q
jYL/yc4LnMABMRR/URLbcEFAS84WddfwMPS/mr2bi/qv5bRZom69yhErdkuqnWoj
rFdzYnITK57zvTqIxJqM1/NVhxP+XqEwlzmRiaHUMIFoQQC/WKukw3a8zWGq8enJ
A8C5USG7UZeIqf85GqrddGnWxn1u4zQ4bV0wosn/U3Rs25wvLOVCL1tqT9Uz6tx0
lN/z8AU8cCwMG5J1XbY8Q50euqO94D/sxYksPTxIGNGyaC4tIwaWnrVbs+QhT/kO
phBhOd/NXtISUV44liyORn2QYOSm7A/SV0FvWnOFf4HrfXie2HSlKqwh3p+QRMI=
=V2IM
-----END PGP SIGNATURE-----

Attachment: 0xFAAE4D19.asc
Description:

------------------------------------------------------------------------------
ThinkGeek and WIRED's GeekDad team up for the Ultimate 
GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the 
lucky parental unit.  See the prize list and enter to win: 
http://p.sf.net/sfu/thinkgeek-promo

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users