Re: Dsniff/mailsnarf

2004-02-24 Thread tps
On Tue, Feb 24, 2004 at 05:20:01PM -0600, elijah wright wrote: > > > > I've been asked to place a sniffer on a network that handles HIPPA > > > data, and watch for e-mail containing certain strings. I figured that > > > mailsnarf would be the best way to do this. > > > > > Aside from any of hte te

Re: Dsniff/mailsnarf

2004-02-24 Thread tps
On Tue, Feb 24, 2004 at 06:19:48PM -0500, John Keimel wrote: > On Tue, Feb 24, 2004 at 06:11:20PM -0500, [EMAIL PROTECTED] wrote: > > I've been asked to place a sniffer on a network that handles HIPPA data, > > and watch for e-mail containing certain strings. I figured that mailsnarf > > would be t

Dsniff/mailsnarf

2004-02-24 Thread tps
I've been asked to place a sniffer on a network that handles HIPPA data, and watch for e-mail containing certain strings. I figured that mailsnarf would be the best way to do this. Right. In testing, if I run: mailsnarf -i eth2 . "tcp" I get all email. If I run mailsnarf -i eth2 ".*STD.*" "t

Re: Dsniff/mailsnarf

2004-02-24 Thread tps
On Tue, Feb 24, 2004 at 05:20:01PM -0600, elijah wright wrote: > > > > I've been asked to place a sniffer on a network that handles HIPPA > > > data, and watch for e-mail containing certain strings. I figured that > > > mailsnarf would be the best way to do this. > > > > > Aside from any of hte te

Re: Dsniff/mailsnarf

2004-02-24 Thread tps
On Tue, Feb 24, 2004 at 06:19:48PM -0500, John Keimel wrote: > On Tue, Feb 24, 2004 at 06:11:20PM -0500, [EMAIL PROTECTED] wrote: > > I've been asked to place a sniffer on a network that handles HIPPA data, > > and watch for e-mail containing certain strings. I figured that mailsnarf > > would be t

Dsniff/mailsnarf

2004-02-24 Thread tps
I've been asked to place a sniffer on a network that handles HIPPA data, and watch for e-mail containing certain strings. I figured that mailsnarf would be the best way to do this. Right. In testing, if I run: mailsnarf -i eth2 . "tcp" I get all email. If I run mailsnarf -i eth2 ".*STD.*" "t

Re: Attempts to poison bayesian systems

2003-12-23 Thread tps
On Tue, Dec 23, 2003 at 01:25:30PM +, Dale Amon wrote: > I've been noticing loads of mails like this lately: > > Date: Sun, 21 Dec 2003 16:25:34 +0500 > From: "Joseph Jenkins" <[EMAIL PROTECTED]> > Subject: Re: MIT, rest in peace! > To: [EMAIL PROTECTED] > X-Mailer: mPOP Web-Mail 2.1

Re: Attempts to poison bayesian systems

2003-12-23 Thread tps
On Tue, Dec 23, 2003 at 01:25:30PM +, Dale Amon wrote: > I've been noticing loads of mails like this lately: > > Date: Sun, 21 Dec 2003 16:25:34 +0500 > From: "Joseph Jenkins" <[EMAIL PROTECTED]> > Subject: Re: MIT, rest in peace! > To: [EMAIL PROTECTED] > X-Mailer: mPOP Web-Mail 2.1

Re: snort, where to listen?

2003-05-15 Thread tps
On Fri, May 16, 2003 at 09:49:32AM +0200, [EMAIL PROTECTED] wrote: > Hi all, > > I just installed Snort IDS on my firewall Debian box which is so configured: > > eth0 10.0.0.1 (serves internal LAN) > eth1 192.168.100.1 (directly connected to an ADSL modem auto-connecting to > the > provider wit

Re: HELP, my Debian Server was hacked!

2003-04-24 Thread tps
On Thu, Apr 24, 2003 at 04:02:56AM +0100, Dale Amon wrote: > On Wed, Apr 23, 2003 at 10:44:34AM -0400, James Duncan wrote: > > Obviously steps should be in place to mitigate the damage of these sorts > > of acts. Have steps in place to quickly replace machines that have to be > > removed from prod

Re: OT: Is it so easy to break into an NIS?

2003-03-19 Thread tps
On Wed, Mar 19, 2003 at 02:09:51AM -0800, Rick Moen wrote: > Quoting seph ([EMAIL PROTECTED]): > > > depends what you mean by free. Are you aware of openafs? > > http://www.openafs.org > > That is of course derived from the IBM Transarc software. Hmmm. Some > while back, I'd been lead to believ

Re: OT: Is it so easy to break into an NIS?

2003-03-19 Thread tps
On Wed, Mar 19, 2003 at 02:09:51AM -0800, Rick Moen wrote: > Quoting seph ([EMAIL PROTECTED]): > > > depends what you mean by free. Are you aware of openafs? > > http://www.openafs.org > > That is of course derived from the IBM Transarc software. Hmmm. Some > while back, I'd been lead to believ

Re: machine monitoring packages

2003-02-13 Thread tps
On Thu, Feb 13, 2003 at 02:59:26PM +, gabe wrote: > I would like to know what ppl think is the best package for monitor > servers, at my last work place they were installing "mon". In my new > job they use Nagios, which I'm not to sure about due to the fact that > installation / configurati

Re: machine monitoring packages

2003-02-13 Thread tps
On Thu, Feb 13, 2003 at 02:59:26PM +, gabe wrote: > I would like to know what ppl think is the best package for monitor > servers, at my last work place they were installing "mon". In my new > job they use Nagios, which I'm not to sure about due to the fact that > installation / configurati

Re: securing pop3

2003-02-08 Thread tps
On Sat, Feb 08, 2003 at 03:23:33PM +0100, Kristof Goossens wrote: > Hello all, > > I need to make a pop3 account on my server. I intend to work with ipop3d to > provide secure pop3 service. Now I want to provide this service for only > few people, and I don't want them to have an account on the sy