Honeypots: Re: any other tool to detect worm?

[James Riden <j.riden () massey ac nz>]

dcneting <ansiry () tm net my> writes:

> is there any tools that i can use to just detect worm-like activity besides
> that using honeyd? if there is, how can i use it to detect worms(known and
> unknown) preferably open source platform.
A lot of worms will show up in snort - via signatures (e.g Welchia) or
they will appear in the portscan.log file (e.g. Blaster). 

cheers,
 Jamie
-- 
James Riden / j.riden () massey ac nz / Systems Security Engineer
GPG public key available at: http://www.massey.ac.nz/~jriden/
This post does not necessarily represent the views of my employer.