Re: Need filters

["David H. Lipman" <DLipman () Verizon Net>]

From: "bart sikkes" <b.sikkes () gmail com>

> > Thanx!

> > I passed on your comment.  Maybe what I should do next is point him to this News
> > group.

| and what if the malware uses the port(s) you are going to exclude?
| specially with malware i would be careful with what you call noise,
| that noise can be used to hide the malware.

| bart

Good point but, after a while of examining malware communications you get a good feel for 
what they don't do.

-- 
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp 



___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe