[Snort-users] Spade initial release
hoagland at ...47...
Wed Sep 13 16:33:01 EDT 2000
Silicon Defense is please to announce the initial release of SPADE,
the Statistical Packet Anomaly Detection Engine.
Spade is a Snort preprocessor plugin that looks at TCP SYN packets to
specified networks, and sends alerts about those that are unusual
(e.g., the have a destination port/host combination rarely seen on
your network). This might indicate some probing or scanning that is
occurring (or it might be something benign that just seems unusual).
You can find out more information and download a copy from:
We look forward to hearing your experiences with it. We have used it
to find portscan events and apparent probes that we would not have
otherwise known about.
|* Jim Hoagland, Associate Researcher, Silicon Defense *|
|* hoagland at ...47... *|
|* Voice: (707) 445-4355 x13 Fax: (707) 826-7571 *|
More information about the Snort-users