RE: [Snort-users] snort rule for vmware

This is a discussion on RE: [Snort-users] snort rule for vmware within the Snort forums, part of the System Security and Security Related category; This is a multi-part message in MIME format. ------=_NextPart_000_0003_01C51B24.71782900 Content-Type: text/plain; charset="us-ascii" ...


Go Back   Usenet Forums > System Security and Security Related > Snort

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 02-25-2005
Jim Hendrick
 
Posts: n/a
Default RE: [Snort-users] snort rule for vmware

This is a multi-part message in MIME format.

------=_NextPart_000_0003_01C51B24.71782900
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit

No "rules" but (unless the user has changed it) they use a default MAC
address prefix that should be easy to spot.

-----Original Message-----
From: snort-users-admin@lists.sourceforge.net
[mailto:snort-users-admin@lists.sourceforge.net] On Behalf Of Christopher
Stack
Sent: Thursday, February 24, 2005 7:03 PM
To: snort-users@lists.sourceforge.net
Subject: [Snort-users] snort rule for vmware


any rules for finding vmware nics?


------=_NextPart_000_0003_01C51B24.71782900
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii">
<TITLE>Message</TITLE>

<META content=3D"MSHTML 6.00.2800.1491" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><SPAN class=3D250422515-25022005><FONT face=3DArial color=3D#0000ff =
size=3D2>No=20
"rules" but (unless the user has changed it) they use a default MAC =
address=20
prefix that should be easy to spot.</FONT></SPAN></DIV>
<BLOCKQUOTE dir=3Dltr style=3D"MARGIN-RIGHT: 0px">
<DIV></DIV>
<DIV class=3DOutlookMessageHeader lang=3Den-us dir=3Dltr =
align=3Dleft><FONT=20
face=3DTahoma size=3D2>-----Original Message-----<BR><B>From:</B>=20
snort-users-admin@lists.sourceforge.net=20
[mailto:snort-users-admin@lists.sourceforge.net] <B>On Behalf Of=20
</B>Christopher Stack<BR><B>Sent:</B> Thursday, February 24, 2005 7:03 =

PM<BR><B>To:</B> snort-users@lists.sourceforge.net<BR><B>Subject:</B>=20
[Snort-users] snort rule for vmware<BR><BR></FONT></DIV>
<DIV><FONT face=3DArial size=3D2>any rules for finding vmware=20
nics?</FONT></DIV></BLOCKQUOTE></BODY></HTML>

------=_NextPart_000_0003_01C51B24.71782900--




-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users
Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 02:17 AM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0