RE: TCPDUMP Output

2001-11-03 Thread Matthew Travis Sibley
Good question... The stuff to the right is the ASCII representation to the HEX output to the left. Notice each group of four characters in the hex output equals two characters in the ASCII side. In the first group, 4500 HEX, the hex number 45 is 69 decimal which is the letter 'E' in ASCII. Hope

RE: snort

2001-10-31 Thread Matthew Travis Sibley
Check if config. Is eth0 a configured interface? Maybe it's eth1 for instance... -Original Message- From: Lucian Vanghele [mailto:[EMAIL PROTECTED]] Sent: Monday, October 29, 2001 6:03 AM To: [EMAIL PROTECTED] Subject: snort hi there I try to use snort with "-i" option (-i eth0, -i if

RE: IDS White Papers/Documents

2001-10-31 Thread Matthew Travis Sibley
I can tell you that you have your work cut out for you. It all depends upon what you are wishing to see. When implementing an IDS solution, most people want to see/detect as much as possible. There are a few issues: Host based IDS sensors, network based IDS sensors, or both. Ideally you would