[Snort-users] preproccesor stream

Vitaly McLain twistah at ...93...
Fri Jan 19 00:09:27 EST 2001


I belive RFP's Whisker CGI scanner does session splicing as well (in order
to try and hide CGI scanning activities.)

Lance, didn't I see someone trying some weird version of session splicing on
Honeynet? I could be confusing it with something else.

Vitaly McLain
twistah at ...93...
twistah @ OPN & EfNet
"If you don't turn on to politics, politics will turn on you."
       - Ralph Nader





More information about the Snort-users mailing list