[Snort-users] RE : snort 2.9.2.3 not detecting skype

Paul Halliday paul.halliday at ...11827...
Tue Jul 10 18:24:03 EDT 2012


On Tue, Jul 10, 2012 at 7:04 PM, rmkml at ...1855... <rmkml at ...1855...> wrote:
> Hi,
> Skype are protocol not easy detected.

Are these rules defunct:

ET POLICY Skype User-Agent detected 	2002157
ET POLICY Skype VOIP Checking Version (Startup) 	2001595

I use them with Snort to detect skype. Is there a usage scenario that
I am not detecting?

Thanks.

-- 
Paul Halliday
http://www.pintumbler.org/




More information about the Snort-users mailing list