North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Using snort to detect if your users are doing interestingthings?

  • From: Jeroen Massar
  • Date: Fri Jun 10 06:04:24 2005 
On Thu, 2005-06-09 at 23:29 +0300, Kim Onnel wrote:
> How about project Darknet and sinkholes and monitoring dark ip space,
> worms and botnets usually scans blindly right and left, so there is a
> good chance you will get a glimpse on infected hosts if thats what you
> want, i catch infected hosts by looking at apache access logs and i
> see alot of scans,

Read the following interesting article:
http://www.spectrum.ieee.org/WEBONLY/publicfeature/may05/0505worm.html

Greets,
 Jeroen

Attachment: signature.asc
Description: This is a digitally signed message part