Re: BO pre-processor

[Beno Chapman <beno_chapman () wgbh org>]

Are you defined as being in the same $HOME_NET as the machine running Snort?

On 6/18/02 1:56 PM, "larosa, vjay" <larosa_vjay () emc com> wrote:

> Hello,
>
> Has anybody done any work with the Back Orrifice 2000 Pre-Processor? I have
> been testing in my lab and snort appears to be missing
> all of the BO traffic. I have tried with and with out the -nobrute option. I
> am not that familiar with BO, but I am remote controlling the
> PC so I would expect to see some sort of alert from snort right? Thanks!
>
> vjl
>
> ----------------------------------------------------------------------------
>                  Bringing you mounds of caffeinated joy
> > > >     http://thinkgeek.com/sf    <<<
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


----------------------------------------------------------------------------
                   Bringing you mounds of caffeinated joy
                   >>>     http://thinkgeek.com/sf    <<<

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users