Snort mailing list archives
snort 2.9.8.3 not detecting skype
From: Al Al <alcol () hotmail com>
Date: Tue, 10 Jul 2012 17:37:12 +0000
Hi, I have used snort on a old system where snort 2.8.3 well detect snort with p2p.rules sigs
I done a new machine with fedora 17 64 with snort 2.9.2.3
I loaded p2p rules and even compared with old ones, I have http inspect activated as I have some message from snort
inside syslog where say (http_inspect)
I loaded other rules from ET and Bleeding but no chance to have skype detected ! I have log of different items but not
skype
I use last squid as proxy on that machine, its port is listed inside http_ports and I have messages for targeting IP or
flash or other issue
snort could find but not what I need
what is wrong?
It could be the new skype or latest openssl 1.0.1c
please help
I even loaded decode and another rule file from preproc as decode.rules and one another
------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- hi, to understand Al Al (Jul 09)
- snort 2.9.8.3 not detecting skype Al Al (Jul 10)
- FW: snort 2.9.8.3 not detecting skype Al Al (Jul 11)
- Re: FW: snort 2.9.8.3 not detecting skype kay (Jul 11)
- FW: snort 2.9.8.3 not detecting skype Al Al (Jul 11)
- snort 2.9.8.3 not detecting skype Al Al (Jul 10)
