[Snort-users] HTTP port statistics

Joel Esler joel.esler at ...14399...
Wed Mar 31 00:21:10 EDT 2010


You may also want to check out the "detect_anomalous_servers" function  
of http inspect.

It's on page 45 of the PDF manual.

--
Joel Esler
Sent from my iPhone

On Mar 30, 2010, at 11:33 PM, Matt Olney <molney at ...1935...> wrote:

> nmap...and if you're going to do that, you should probably go ahead
> and do what this post says:
>
> http://global-security.blogspot.com/2010/02/hogging-snort-host-attribute-table.html
>
> Matt
>
> On Tue, Mar 30, 2010 at 11:08 PM, ll <ibeginhere at ...11827...> wrote:
>> hi all
>> I want to know what HTTP port are running in the network. I just  
>> think
>> there will 80,8000,8080, but I want to know exact how many port are
>> there . how to achieve this by snort or tcpdump ?
>>
>> --- 
>> --- 
>> --- 
>> ---------------------------------------------------------------------
>> Download Intel® Parallel Studio Eval
>> Try the new software tools for yourself. Speed compiling, find bugs
>> proactively, and fine-tune applications for parallel performance.
>> See why Intel Parallel Studio got high marks during beta.
>> http://p.sf.net/sfu/intel-sw-dev
>> _______________________________________________
>> Snort-users mailing list
>> Snort-users at lists.sourceforge.net
>> Go to this URL to change user options or unsubscribe:
>> https://lists.sourceforge.net/lists/listinfo/snort-users
>> Snort-users list archive:
>> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>>
>
> --- 
> --- 
> --- 
> ---------------------------------------------------------------------
> Download Intel® Parallel Studio Eval
> Try the new software tools for yourself. Speed compiling, find bugs
> proactively, and fine-tune applications for parallel performance.
> See why Intel Parallel Studio got high marks during beta.
> http://p.sf.net/sfu/intel-sw-dev
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users




More information about the Snort-users mailing list