Section: .. / sniffers / snort /
| /// File Name: |
snort-0.99rc5-lib |
Description:
|
snort-0.99rc5-lib is a set of example Snort rules. It's a short one, about 43 rules total, but it gives a good overview of the basic rule types and how to use the pattern matcher properly. This version of snort-lib includes a new buffer overflow (named) and some other stuff.
| | Author: | Martin Roesch | | File Size: | 3482 | | Last Modified: | Aug 16 20:13:52 1999 |
| MD5 Checksum: | 37499db53c56bbcc8db438ed41e40a43 |
|
| /// File Name: |
snort-0.99rc5.tar.gz |
Description:
|
Snort v0.99rc5 is an extremely versatile packet logger. This version features dramatic speed improvements, due to improved Boyer-Moore pattern match routine optimizations, a more logically laid out packet header print out, packet statistics, fragment detection, more complete IP header decoding, a new command line switch ("-e") to display/log the Ethernet header, plus TOS field and IP Fragment ID field display/logging. Improved timestamping (down to the millisecond) implemented. This release also has TCP and IP option decoding, and lots of new rules. You can now specify port ranges (or greater than/less than) and TCP flags in rules. This allows you to do things like this: alert tcp any any -> 192.168.1.0/24 :1024 {SF} <SYN FIN scan on priv ports!> which will alert on all TCP traffic below port 1024 on both SRC and DST IP or this: alert tcp any any -> 192.168.1.0/24 6000:6010 <X access attempt!> which will pick out inbound traffic going ports 6000 thru 6010. Also includes bugfixes, cleaned up fragment printout routines, truncated packet fragments get dumped in their own file, rules processor routine recoded and more flexible, much more. Several important bugfixes in this release, plus recoded IP/TCP option decoding, revised packet printout routines, and now logs illegal TCP and IP options as well in an IP_BOGUS log file.
| | Author: | Martin Roesch | | File Size: | 77438 | | Last Modified: | Aug 16 20:13:52 1999 |
| MD5 Checksum: | 3f21c79850eb05e6d91b159dae294ee8 |
|
| /// File Name: |
snort-1.0.tar.gz |
Description:
|
Snort is a libpcap-based packet sniffer/logger. It reads and decodes packets from the link layer through the application layer, dumping the decoded packet data. It can log these packets in their decoded form to directories which are generated based upon the IP address of the remote computer. This allows it to be used as a sort of "poor man's intrusion detection system" if you specify what traffic you want to record and what to let pass.
| | Author: | Martin Roesch | | Changes: | Added RAW/PPP and SLIP decoding, new command line option to change the order in which the rules are applied for the rules based logging subsystem and there is also a new option to send the alert messages to syslog. | | File Size: | 81049 | | Last Modified: | Aug 16 20:13:52 1999 |
| MD5 Checksum: | de0bf2e7e2bdd0c4e8344cfe37637bd9 |
|
| /// File Name: |
snort-0.97.tar.gz |
Description:
|
Snort v0.97 - packet logger - This program reads and parses packets from the link layer through the transport layer, dumping explicit header information along the way. Good logging capabilities, useful for IDS, debugging network code.
| | Author: | Martin Roesch | | File Size: | 55205 | | Last Modified: | Aug 16 20:13:51 1999 |
| MD5 Checksum: | 4ae1807b156b25c610822bba128f0b93 |
|
| /// File Name: |
snort-0.98.tar.gz |
Description:
|
Snort v0.98 - packet logger - This program reads and parses packets from the link layer through the transport layer, dumping explicit header information along the way. Good logging capabilities, useful for IDS, debugging network code. It now supports rules based logging and tracks conversations better.
| | Author: | Martin Roesch | | File Size: | 63963 | | Last Modified: | Aug 16 20:13:51 1999 |
| MD5 Checksum: | d14b1b345b0ab2768449fbc45d096126 |
|
| /// File Name: |
snort-0.99.tar.gz |
Description:
|
Snort v0.99 - packet logger - This program reads and parses packets from the link layer through the transport layer, dumping explicit header information along the way. Good logging capabilities, useful for IDS, debugging network code. It now supports rules based logging and tracks conversations better, incorporates content based logging and automatic rules sorting. 66k.
| | Author: | Martin Roesch | | File Size: | 67442 | | Last Modified: | Aug 16 20:13:51 1999 |
| MD5 Checksum: | f1cc0a921c09f05e6a2c751d4b2e1ded |
|
| /// File Name: |
snort-0.99rc6.tar.gz |
Description:
|
Snort v0.99rc6 is an extremely versatile packet logger. This version of Snort has a new rules set implementation. The new set is more flexible and easier to add new user requested rule types to from a programmatic standpoint. It also includes new rule types to be able to detect TTL values and ICMP type/codes. Rc6 also has a completely rewritten, unified reporting system, so the output is consistent across all output file types (logs/alerts/fragments/etc).
| | Author: | Martin Roesch | | File Size: | 80950 | | Last Modified: | Aug 16 20:13:51 1999 |
| MD5 Checksum: | 67f4fa08daa2e3b607377a08d47afa53 |
|
| /// File Name: |
snort-1.0-lib |
Description:
|
snort-1.0-lib is a set of example Snort rules. It's short, but gives a good overview of the basic rule types and how to use the pattern matcher properly. This version of snort-lib includes alot of new stuff.
| | Author: | Martin Roesch | | File Size: | 5234 | | Last Modified: | Aug 16 20:13:51 1999 |
| MD5 Checksum: | b63e655ef98a05ff3f474f27353d38f3 |
|
| /// File Name: |
snort-lib |
Description:
|
snort-lib is a set of example Snort rules. It's a short one, about 43 rules total, but it gives a good overview of the basic rule types and how to use the pattern matcher properly.
| | Author: | Martin Roesch | | File Size: | 3833 | | Last Modified: | Aug 16 20:13:51 1999 |
| MD5 Checksum: | 51d1d8bb9d63260df2cb4be686e15758 |
|
| /// File Name: |
snort-0.96.tar.gz |
Description:
|
Snort is a libpcap-based sniffer/packet logger. It's fairly portable and tested on Solaris 2.5.1 (Sparc), Solaris 2.6 (x86), Linux, and FreeBSD.
| | Author: | Martin Roesch | | File Size: | 54662 | | Last Modified: | Aug 16 20:13:50 1999 |
| MD5 Checksum: | 838b7f7b9575fdbe68539190ad9bf3fd |
|
| /// File Name: |
snort-0.99rc6-lib |
Description:
|
snort-0.99rc6-lib is a set of example Snort rules. It's short, but gives a good overview of the basic rule types and how to use the pattern matcher properly. This version of snort-lib includes alot of new stuff.
| | Author: | Martin Roesch | | File Size: | 5039 | | Last Modified: | Aug 16 20:13:50 1999 |
| MD5 Checksum: | c86e1ab5aafe35e0398f21e7588bae93 |
|
|
|
|
|
![.:[ packet storm ]:.](/images/ps-ani.gif)
