[Snort-sigs] snort telnet login alert

Виталий Щетинин sch_vitaliy at ...3783...
Sun Sep 7 12:06:10 EDT 2014


 Ok. We can forgot about my rule. How can I alert telnet login?


Sun, 07 Sep 2014 11:56:08 -0400 от waldo kitty <wkitty42 at ...3507...>:
>On 9/7/2014 5:41 AM, Виталий Щетинин wrote:
>> Hello. I need to alert telnet login and password. How can I do it with snort? I
>> have write a dynamic rule but it doesnt work for all telnet configuration. Is
>> there some different method?
>
>please be more specific... telnet is port 23... what do you mean by your rule 
>not working for all telnet configs? what does your rule look like?
>
>-- 
>  NOTE: No off-list assistance is given without prior approval.
>        Please *keep mailing list traffic on the list* unless
>        private contact is specifically requested and granted.
>
>------------------------------------------------------------------------------
>Slashdot TV. 
>Video for Nerds.  Stuff that matters.
>http://tv.slashdot.org/
>_______________________________________________
>Snort-sigs mailing list
>Snort-sigs at lists.sourceforge.net
>https://lists.sourceforge.net/lists/listinfo/snort-sigs
>http://www.snort.org
>
>
>Please visit  http://blog.snort.org for the latest news about Snort!

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20140907/340262f8/attachment.html>


More information about the Snort-sigs mailing list