[Snort-sigs] Rule to capture POP3 username/password for mail server migration

Steven Alexander alexander.s at ...1565...
Mon Feb 23 13:45:04 EST 2004

I've found that it works best to bite into a piece of cat5 attached to your switch's mirror/monitoring port; with practice you can *feel* the passwords.  It helps if any of your teeth have metal fillings.

	-----Original Message----- 
	From: Brian [mailto:bmc at ...95...] 
	Sent: Mon 2/23/2004 1:17 PM 
	To: Michael Breton 
	Cc: 'snort-sigs at lists.sourceforge.net' 
	Subject: Re: [Snort-sigs] Rule to capture POP3 username/password for mail server migration

	On Mon, Feb 23, 2004 at 01:18:34PM -0500, Michael Breton wrote:
	> How would you construct a rule to catch POP3 logins including usernames and
	> passwords?
	Don't use snort.  There are lots of password snarfing programs
	designed to do this.  Try dsniff.
	SF.Net is sponsored by: Speed Start Your Linux Apps Now.
	Build and deploy apps & Web services for Linux with
	a free DVD software kit from IBM. Click Now!
	Snort-sigs mailing list
	Snort-sigs at lists.sourceforge.net
	This email has been scanned by the MessageLabs Email Security System.
	For more information please visit http://www.messagelabs.com/email

More information about the Snort-sigs mailing list