Forum: IDS & Scanner Discussions

Hi all, I've been trying to configure snort on my XP. I've spent practically the whole day reading the friggin snort manual... and to be honest I...

I need a snort rule for the MS blaster worms and its variants. I tried it on my own but no success :rolleyes:

I just got my snort up and running and was looking through my logs when I saw this packet. If you look close to the top you see the words...

Great news for ISS @ http://www.enterpriseitplanet.com/security/news/article.php/2246561

I'm attempting to write a script that will search my logfiles for exploit attempts. I know its not a great script... Does anybody have any...

Hey guys I found on the net a tool I didn't know about: LIDS (Linux IDS): basicaly an File System IDS & integrity checker. http://www.lids.org/ ...

The dcom rpc Vulnerability bring great damgae to a host,when we use the exploit to test the Vulnerability,the service of the host will be crashed or...

I have recently suffered some hard attacks on my 2-PC LAN after which I had some file losses. Today I had another attack. Firewall message: ...

One of the things that I'm doing is evaluating an enterprise forensic solution. For those who are doing the same, here is what I found right off the...

Does anyone know why the binaries for snort have been removed from their site? www.snort.org/dl/binaries/linux :( Any info would be most...

Since Friday I have been seeing some different hits in SNORT. I am getting a lot of "ICMP Destination Unreachable (Communication Administratively...

Release Anouncement: LAk -> IPS: Paper and Compilation Open Source: Intrusion Prevention System (FREEWARE!!) First release of LAk-IPS a...

Recently I've been seeing a lot of UDP port 1189 probes to my workstation agent from various unrelated IP addresses. This activity looks like...

Yep, for those of you who are Nessus freaks like me, hop over to ftp.nessus.org and grab version 2.0.7. :) -TH13

Anyone tried Tipping Point? I have been interested for a while and even went so far as to arrange a quote. :eek: and I say again :eek: ...

hi , just saw the article about gartners market analysis towards IDS .even i dont accept with that .But what do u people think about the...

Whats the best port scanner out there? I want a good one so I can chck my home LAN for any valnurabilites. I got netscan from www.networkpunk.com ,...

Hi, Does anyone out there know where I can find SNORT rules or ISS RealSecure TRONS to sniff out Win32.SoBig.E ? I have been digging around on...

"A stand-alone packet sniffer doesn't transmit any packets, but when installed non-standalone on a normal computer, the sniffing program will often...

Hey folks I need ur help on this one! I'm looking for a way to trap (SNMP) event from a File-system IDS (or integrity checker) like tripwire, AIDE...