Snort 2.8.1 Released

Thursday, April 3rd, 2008

New Additions Target-Based support to allow rules to use an attribute table describing services running on various hosts on the network. Eliminates reliance on port-based rules. Support for GRE encapsulation for both IPv4 & IPv6. Support for IP over IP tunneling for both IPv4 & IPv6. SSL preprocessor to allow ability to not inspect ...

Wireshark 1.0 Released

Sunday, March 30th, 2008

"I'm proud to announce the release of Wireshark 1.0. This is the culmination of nearly ten years of hard work by a team of brilliant and talented developers. It is an honor to be able to work with these people. On behalf of the development team, I would like to thank ...

Session Hijacking in Windows Networks

Saturday, March 29th, 2008

I found a great write-up over at SANS that goes over session hijacking in amazing detail.  Click the link below to read the full 49-page white paper. Session Hijacking in Windows Networks

Free Honeypot Client Could Sting Malware

Thursday, March 27th, 2008

The Honeynet Project has released a new freebie honeypot client tool that lets security pros and researchers automatically detect and dissect bot infections and other malware attacks on client machines. Capture-HPC v2.1 is an updated and enhanced version of the Honeynet Project’s high-interaction Capture-HPC client honeypot, which the organization last year ...

A Peek at Snort 3.0

Thursday, March 20th, 2008

The wildly popular open source Snort intrusion prevention technology is getting a major makeover. Marty Roesch, who wrote the first version of the software nearly 10 years ago, has rewritten the software from top to bottom in the next-generation Snort 3.0 release, due in beta next month and early next year ...