[Snort-sigs] Rule to capture POP3 username/password for mail server migration

Brian bmc at ...95...
Mon Feb 23 13:26:07 EST 2004


On Mon, Feb 23, 2004 at 01:18:34PM -0500, Michael Breton wrote:
> How would you construct a rule to catch POP3 logins including usernames and
> passwords?

Don't use snort.  There are lots of password snarfing programs
designed to do this.  Try dsniff.

Brian




More information about the Snort-sigs mailing list