Forum: IDS & Scanner Discussions

How can IDS run on a port? Does it server as intermediary between the attacker (connection) and a process? If it runs on some random port "as a...

Hello everyone, I'm at work right now and hope i can get an answer before the end of the day! Anyway, I'll give you a very short story, a machine...

I've never had this before, but it could be more common that I've experienced. Since Sunday my logwatch email has been reporting a few attempts...

Yep, my favorite scanner is now up to v 3.55. Grab it at www.insecure.org/nmap/nmap_download.html woot!! :p Here is what Fyodor has to...

how a attacker abuse from abort_invalid_hex option in snort? for example if he send invalid hex (%0J) what happen ? do web server accept it? ...

do anybody explain me portmapper ? :confused:

how a attacker defeat a string that have space characters with tab characters? i want to underestand "full_whitespace option" in snort :confused:...

So I wanted to do some testing yesterday. I set the firewall to leave four machines available to the outside world. A NetWare 6 mail server, a...

in http_decode ,The original packet is not altered by this process. then why do this stage(preprocessor) when no changed ? what use it? tnx

hi do anybody explain me preprocessor in snort ????? i can not find a good article about it

where i can download winsnort2html?

I'm attempting to familiarize myself with snort in all aspects. I have setup snort with little to no problems and have it running. I've played with...

Looking for a FREE HIDS (Host-based Intrusion Detection System) for your Windows or *Nix box? Check out OSIRIS http://osiris.shmoo.com! It's very...

I downloaded NMap 3.55 command line version from www.insecure.org and unzipped the file. My problem is that when i go to open NMap the command line...

If you have some time and care to share your opinions I would appreciate it. I am writing an article and looking for some input regarding IDS/IPS. Do...

Hi all, i have used nmap 1.3.1 (win32 with GUI) and faced no problems but i tried to used nmap 3.55 (win32) but when i type the command nmap -sS -O...

Dear Members, I would like to know what are the state-of-the-art research results of Intrusion Detection area. Could you please help me with...

I have recently noticed permitted portscans listed in my firewalls intrusions log file. The only options about portscans that my firewall provides...

Didn't see this news yet... Source

I was just reading an article about the advantages of incorporating a multi-layered IDS, and thus I want to pose the question: What software does my...