[Snort-openappid] openVPN 443

Costas Kleopa (ckleopa) ckleopa at ...5...
Mon Apr 11 13:34:40 EDT 2016


Do you have any pcap with this kind of traffic? 
If the traffic is encrypted then it maybe a challenge to identify the actual OpenVPN traffic.

> On Apr 11, 2016, at 7:11 AM, valentin.giraud at ...128... wrote:
> 
> Hi,
> 
> I am trying to detect openVPN on the port 443 (it already works with the 
> port 1194). Is it supposed to be detect by the default rules ? Or do i 
> have to write my own custom rules?
> 
> Valentin.
> 
> ------------------------------------------------------------------------------
> Find and fix application performance issues faster with Applications Manager
> Applications Manager provides deep performance insights into multiple tiers of
> your business applications. It resolves application problems quickly and
> reduces your MTTR. Get your free trial! http://pubads.g.doubleclick.net/
> gampad/clk?id=1444514301&iu=/ca-pub-7940484522588532
> _______________________________________________
> Snort-openappid mailing list
> Snort-openappid at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-openappid
> 
> Please visit http://blog.snort.org to stay current on all the latest Snort news!





More information about the Snort-openappid mailing list