... otherwise, how effective is a firewall if it blocks based on ... in which the application protocols being used can be detected and ... let pf know what to filter and what not? So, is ... random garbage traffic is generated to deter proper analysis. Please correct ...

openbsd-misc - Srikant Tangirala - May 9 2008 - 01:10

Snort may also be of interest here. > > You can do it using ... ), > it's an open-source, Unix-based Network Intrusion Detection > System (NIDS) that ... ) feature and can > reports (confirmed) uses of protocols on non-standard ports. > > ...

openbsd-misc - Marcus Andree - May 12 2008 - 07:44

... Tangirala wrote: > let pf know what to filter and what not? So, is > ... HTTP/HTTPS, and so on > for all the common protocols? With my little ... enforces the common parts of the protocol. this does not prevent anyone to tunnel something else in the well- ...

openbsd-misc - Reyk Floeter - May 9 2008 - 01:58

On Fri, May 09, 2008 at 10:40:18AM +0530, Srikant ... of software(s) which understands each protocol > thoroughly, can look at raw ... -time > and detect the protocol being used. Even then, ah, i'm ... kidding, there is no way to do content inspection in "real- ...

openbsd-misc - Reyk Floeter - May 9 2008 - 02:25

... as being related to a specific type of application protocol. Payload ... up with a good solution to this problem. If there is ... Floeter wrote: > On Fri, May 09, 2008 at ... time > > and detect the protocol being used. Even then, > > ah, i ...

openbsd-misc - Srikant Tangirala - May 9 2008 - 02:53

... network admins as being related to a specific type of application > protocol. Payload is ... > Thanks for your time. > > Srikant Tangirala. > > On Fri, May 9, 2008 at 11: ... real-time > > > and detect the protocol being used. Even then, > > > > ah, i'm ...

openbsd-misc - Reyk Floeter - May 9 2008 - 03:06

... in real-time > > Any help will be great. Thanks in advance. > > Srikant Tangirala. ... it's an open-source, Unix-based Network Intrusion Detection System (NIDS) ... feature and can reports (confirmed) uses of protocols on non-standard ports. Please ...

openbsd-misc - jean-philippe luiggi - May 9 2008 - 07:40

... in real-time >> and detect the protocol being used. Even then, > > ah, i'm ... a are kidding, there is > no way to do content inspection in "real-time" ... actually systems capable of identifying traffic on layer7 in realtime, although commercial. /Johan ...

openbsd-misc - Johan Fredin - May 9 2008 - 04:51

Thanks a lot jean-philippe ! Will give it a try immediately. Regards Srikant Tangirala.

openbsd-misc - Srikant Tangirala - May 9 2008 - 09:35