[Snort-users] snort rules

Phillip Bailey pbailey at ...14793...
Thu Jun 17 12:06:27 EDT 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Dear Sir,

In order to detect a man in the middle attack, you need to detect
arp poisoning in your network, please take a look to ARP Spoof
Preprocessor in the snort manual.

In the meantime my best regards,

Phillip



On 06/17/2010 07:10 AM, Nayan Jyoti Das wrote:
> Hi all,
> 
>          I want to know snort rule to detect man in the middle. So plz give
> me the rule in short and in simple so that i understand in ease..........
> 
> Thanks..........
> 
> 
> 

- -- 
(SPSA) Snorby Preconfigured Security Applications web page
http://www.cryptolife.org/index.php/Spsa
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAEBAgAGBQJMGkf8AAoJEA7gvUj6rk0Z4F4H/14WGoQSUNwyg79kJsBX765Q
jYL/yc4LnMABMRR/URLbcEFAS84WddfwMPS/mr2bi/qv5bRZom69yhErdkuqnWoj
rFdzYnITK57zvTqIxJqM1/NVhxP+XqEwlzmRiaHUMIFoQQC/WKukw3a8zWGq8enJ
A8C5USG7UZeIqf85GqrddGnWxn1u4zQ4bV0wosn/U3Rs25wvLOVCL1tqT9Uz6tx0
lN/z8AU8cCwMG5J1XbY8Q50euqO94D/sxYksPTxIGNGyaC4tIwaWnrVbs+QhT/kO
phBhOd/NXtISUV44liyORn2QYOSm7A/SV0FvWnOFf4HrfXie2HSlKqwh3p+QRMI=
=V2IM
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0xFAAE4D19.asc
Type: application/pgp-keys
Size: 1727 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20100617/466d7426/attachment.key>


More information about the Snort-users mailing list