[Snort-users] Snort and IM

waldo kitty wkitty42 at ...14940...
Mon Feb 18 20:02:07 EST 2013


On 2/18/2013 15:41, Josh Bitto wrote:
> oO I didn’t know teamspeak used ssl….ok that explains a lot….
>
> Thank you!
>
> I’m wondering why they created a rule set for tcp if the standard is in ssl….

because TS used to travel in the plain clothes...

FWIW: one can still capture SSL and similar traffic... however, it requires 
playing MitM (Man in the Middle) which means additional software and hoops to 
play with ;)






More information about the Snort-users mailing list