lukebeventures.co.uk

• Next message: lukebeventures.co.uk: "IDS: RE: Looking for info on writing custom signatures for Cisco NetRa nger (IDS)"
• Previous message: Martins, Fernando (Lisbon): "IDS: what's an e-mail devorer?"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Archive: http://msgs.securepoint.com/ids
FAQ: http://www.ticm.com/kb/faq/idsfaq.html
IDS: http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
HELP: Having problems... email questions to ids-owneruow.edu.au
NOTE: Remove this section from reply msgs otherwise the msg will bounce.
SPAM: DO NOT send unsolicted mail to this list.
UNSUBSCRIBE: email "unsubscribe ids" to majordomouow.edu.au
-----------------------------------------------------------------------------
All,

I'm looking for some info on writing my own signature for Cisco's IDS so I
can look for a certain sequence of URLs.

I know you can do string matches via the nrConfigure interface but I want
something more complicated than this.

Has anyone done this sort of thing already or know of any resources?

Regards,
Luke Butcher
Network/Security Analyst
buy.com
Em: lukebbuy.com

require Std::Disclaimer;

____________________________________________________
This message has been checked for all known viruses.

• Next message: lukebeventures.co.uk: "IDS: RE: Looking for info on writing custom signatures for Cisco NetRa nger (IDS)"
• Previous message: Martins, Fernando (Lisbon): "IDS: what's an e-mail devorer?"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]