OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: IDS: batch web log intrusion analysis tools (+ Introduction)
From: Glenn Larsson (Ichininnospam.swipnet.se)
Date: Fri Feb 11 2000 - 08:40:08 CST

FAQ: See http://www.ticm.com/kb/faq/idsfaq.html
IDS: See http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
HELP: Having problems... email questions to ids-owneruow.edu.au
NOTE: Remove this section from reply msgs otherwise the msg will bounce.
SPAM: DO NOT send unsolicted mail to this list.
USUBSCRIBE: email "unsubscribe ids" to majordomouow.edu.au
--------------------------------------------------------------------------- 

---
B Potter wrote:
<A lot of stuff>

Well, i don't have *that* but i have a VB snipped that process
stuff, it's mainly for learning how to write a ids. It's easy
to apply this type of code to:

  - Raw data
  - Deception tools (i.e. fake webservers)
  - Loggfiles

It's available at
  http://www.geocities.com/ichinin/sniper.htm
(Ok, it's VB.. my appologies :o)

It also feature a cheapo-proxy detector..for what it's worth.

Regards,
Glenn
_____________________________________________

My introduction.

Hi. Glenn is the name, been around computers for over 18 years,
5 years of pro experience with networking and stuff. Been playing
around with computer security since i was 15 (that's 11 years..)
Done consulting in Novell, NT, Linux, FreeBSD etc.. have own
network/computer lab home. I have no life, but i know alot about
computers :o)

Regards,
Glenn aka "Ichinin"
Sweden