[Snort-users] SNORT DNS TUNNELING

emmanuel emmanuel.kacou at ...17161...
Thu May 14 03:20:30 EDT 2015


thank you for allowing me to read the charter, however, I ask nothing of 
a home exercise
this is a practical problem that I raised was how to test your dns rules 
as we would do with ICMP rules.
I understand that this is what was used the lists to the assistance.

cordially

Le 13/05/2015 23:55, Joel Esler (jesler) a écrit :
> Emmanuel,
>
> Please read the following link:
>
> https://www.snort.org/faq/can-i-have-help-with-my-homework
>
> --
> *Joel Esler*
> Open Source Manager
> Threat Intelligence Team Lead
> Talos Group
>
>
>> On May 13, 2015, at 2:19 AM, emmanuel <emmanuel.kacou at ...17161... 
>> <mailto:emmanuel.kacou at ...17161...>> wrote:
>>
>>
>> Hello every body;
>>
>> I'm emmanuel from Ivory coste west AFRICA and since 3 days i'm studie 
>> snort.
>>
>> i want to test  dns tunneling  with nort.
>>
>> i got snort rules from snort.org <http://snort.org> and put it in 
>> rules directory.
>> i want to test if my rules are good or not by doing some lab with dns
>> tunneling
>> how can i do it.
>>
>>
>>
>>
>> ------------------------------------------------------------------------------
>> One dashboard for servers and applications across Physical-Virtual-Cloud
>> Widest out-of-the-box monitoring support with 50+ applications
>> Performance metrics, stats and reports that give you Actionable Insights
>> Deep dive visibility with transaction tracing using APM Insight.
>> http://ad.doubleclick.net/ddm/clk/290420510;117567292;y
>> _______________________________________________
>> Snort-users mailing list
>> Snort-users at lists.sourceforge.net
>> Go to this URL to change user options or unsubscribe:
>> https://lists.sourceforge.net/lists/listinfo/snort-users
>> Snort-users list archive:
>> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>>
>> Please visit http://blog.snort.org to stay current on all the latest 
>> Snort news!
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20150514/02a0ffdb/attachment.html>


More information about the Snort-users mailing list