Forum: IDS & Scanner Discussions

how a attacker defeat a string that have space characters with tab characters? i want to underestand "full_whitespace option" in snort :confused:...

geez, can you guys imagine what your Snort logs are going to look like, if anyone suspects that you are using Snort, after the program 'Stick' is...

I post here the translation (by Freetranslation and seriously revised by me in order to make it more understandable) of an interesting article...

I have a client who wants a 24/7 managed ids system and i was wondering if you guys know of any particual companys who do this type of service. If...

what are 3D rules set links in snort?? and what do they do?? i never understood that. :)

What is Nmap? Nmap (”Network Mapper”) is a free open source utility for network exploration or security auditing. It was designed to rapidly scan...

The Wolfman has been assigned the task of finding all Macro's on his network servers. Does anyone know of a Macro scanner that can be used to: ...

in http_decode ,The original packet is not altered by this process. then why do this stage(preprocessor) when no changed ? what use it? tnx

I have need of your aid. I must write a rule for Snort that make an alarm in the case in which a packet contains one pattern A and not contains a...

A serious problem has occured in my friends system that for every command in linux it is giving "command not found". except "cd" Even for "vim"...

is snort able to block intrusions or is it just a logger?? :confused:

how a attacker abuse from abort_invalid_hex option in snort? for example if he send invalid hex (%0J) what happen ? do web server accept it? ...

Is N-stealth a good scanner? If it is not , can you recomend another scanner ? I got linux too.

Im trying to understand why different ports are associated with and to be specific port 5190. How does port 5190 Can anyone explain this to me. Why...

Network tool suite. Trace route, IP and e-mail tracer with geographical positioning, Netstat and Whois GUI, abuse reporter and a fast network scanner...

I Have noticed alot of people asking about wireless networks how to set them up and how to secure them and I know alot of people will get alot of use...

hi guys, looking for some recommendations/advice really? our corporate network consists of 4 sites in a routed environement. We have on...

Hi guys, I posted a problem a few days ago, about hping, however I told antirez who wrote hping but till now i didnt receive any solution, meanwhile,...

hi my friends. as i know there are many implemented NIDS based on misuse detection as snort. but my question is about anomaly detection based...

I just scarapped my previous version of snort for 2.0. I should have stayed with the other. Win XP home is my OS Ok, in my event viewer I'm...