[Snort-users] RE : snort not detecting skype

Paul Halliday paul.halliday at ...11827...
Tue Jul 10 18:24:03 EDT 2012

On Tue, Jul 10, 2012 at 7:04 PM, rmkml at ...1855... <rmkml at ...1855...> wrote:
> Hi,
> Skype are protocol not easy detected.

Are these rules defunct:

ET POLICY Skype User-Agent detected 	2002157
ET POLICY Skype VOIP Checking Version (Startup) 	2001595

I use them with Snort to detect skype. Is there a usage scenario that
I am not detecting?


Paul Halliday

More information about the Snort-users mailing list