Snort mailing list archives

Problem to read the payload from port 443

From: orkid 1116 <orchidla7484 () yahoo com>
Date: Fri, 5 May 2006 04:24:29 -0700 (PDT)

Hello,
   
  I have problem to read the payload from port 443....actually,i already know...of course we cant read the payload 
because port 443 is secure layer...
  but maybe have any tools can generate the payload that enable to read...any ideas to solve this problem???i believe 
this problem must have the solution...but i didn't find....please help me.....as soon as possible....
   
  this is example of the alert signature
   
  WEB-MISC SSLv3 invalid Client_Hello attempt
   
  The example of unreadable payload
   
    
---------------------------------
    a  ]   
---------------------------------
   D[*&#8209;Iï
7gyBÅ&Àt¼*SKÚ,û´£êf" ò£nµÔ&shy; nù#è[1]£/·FÊÓy5À5>ËAÜ     
---------------------------------
       
               d b   
---------------------------------
      c   
---------------------------------
      ]kõ#¦K3¶&¸_^ªjz+X\³I&shy;àîö%Ê¥Ò;:ßT´=ÍtZ~{'±Fò+¹
bDóøW/#&LË_àhÖVKqzFÔïmQ   
---------------------------------
  ;ÔeýêÞ¦ê 2®&shy;ïåg

¨¦Ú¨    Â%[   
---------------------------------
   ¢rï   
---------------------------------
      
---------------------------------
    8ãHSúÞMê!¯zÁÒ¡|whÎRjýs¶Þ¹ú soqá&shy;NAÌU¼xã*ðîÒ   
   
  attacked port : 443
   



__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com

Current thread:

Problem to read the payload from port 443 orkid 1116 (May 10)