Re: snort telnet login alert

[waldo kitty <wkitty42 () windstream net>]

On 9/7/2014 5:41 AM, Виталий Щетинин wrote:
> Hello. I need to alert telnet login and password. How can I do it with snort? I
> have write a dynamic rule but it doesnt work for all telnet configuration. Is
> there some different method?

please be more specific... telnet is port 23... what do you mean by your rule 
not working for all telnet configs? what does your rule look like?

-- 
  NOTE: No off-list assistance is given without prior approval.
        Please *keep mailing list traffic on the list* unless
        private contact is specifically requested and granted.

------------------------------------------------------------------------------
Slashdot TV.  
Video for Nerds.  Stuff that matters.
http://tv.slashdot.org/
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!