This is a discussion on RE: [Snort-users] snort rule for vmware within the Snort forums, part of the System Security and Security Related category; This is a multi-part message in MIME format. ------=_NextPart_000_0003_01C51B24.71782900 Content-Type: text/plain; charset="us-ascii" ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
This is a multi-part message in MIME format.
------=_NextPart_000_0003_01C51B24.71782900 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit No "rules" but (unless the user has changed it) they use a default MAC address prefix that should be easy to spot. -----Original Message----- From: snort-users-admin@lists.sourceforge.net [mailto:snort-users-admin@lists.sourceforge.net] On Behalf Of Christopher Stack Sent: Thursday, February 24, 2005 7:03 PM To: snort-users@lists.sourceforge.net Subject: [Snort-users] snort rule for vmware any rules for finding vmware nics? ------=_NextPart_000_0003_01C51B24.71782900 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; = charset=3Dus-ascii"> <TITLE>Message</TITLE> <META content=3D"MSHTML 6.00.2800.1491" name=3DGENERATOR> <STYLE></STYLE> </HEAD> <BODY bgColor=3D#ffffff> <DIV><SPAN class=3D250422515-25022005><FONT face=3DArial color=3D#0000ff = size=3D2>No=20 "rules" but (unless the user has changed it) they use a default MAC = address=20 prefix that should be easy to spot.</FONT></SPAN></DIV> <BLOCKQUOTE dir=3Dltr style=3D"MARGIN-RIGHT: 0px"> <DIV></DIV> <DIV class=3DOutlookMessageHeader lang=3Den-us dir=3Dltr = align=3Dleft><FONT=20 face=3DTahoma size=3D2>-----Original Message-----<BR><B>From:</B>=20 snort-users-admin@lists.sourceforge.net=20 [mailto:snort-users-admin@lists.sourceforge.net] <B>On Behalf Of=20 </B>Christopher Stack<BR><B>Sent:</B> Thursday, February 24, 2005 7:03 = PM<BR><B>To:</B> snort-users@lists.sourceforge.net<BR><B>Subject:</B>=20 [Snort-users] snort rule for vmware<BR><BR></FONT></DIV> <DIV><FONT face=3DArial size=3D2>any rules for finding vmware=20 nics?</FONT></DIV></BLOCKQUOTE></BODY></HTML> ------=_NextPart_000_0003_01C51B24.71782900-- ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click _______________________________________________ Snort-users mailing list Snort-users@lists.sourceforge.net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/...fo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.p...st=snort-users |