On Thursday 02 October 2003 17:39, Cedric Berger wrote:
> >This is pretty funny, I'm writing something like that...
> >However I'm using an atypical way as usual ;-P
>
> And what's the point of writing that e-mail if you don't
> describe your atypical way?
Ops... What I wanted to say is that in few days a lot of people wrote about
payload inspection.
However my atypical way is to check for common behaviour instead of anomalies.
Something that works. And works better than IDS.
The idea is to block bad traffic, not send an IDS alarm...
Ed
