OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Fabio Pietrosanti (naif) (naifsikurezza.org)
Date: Thu May 02 2002 - 03:18:46 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Should be interesting to know which software was used to create
    Kevin On Demand .

    On the website:
    In the course of tracking the attacker, a great deal of network traffic
    was captured by a specially modified version of tcpdump (here's information
    on the legality of the acquisition of this evidence), and then a program
    written by Tsutomu was used to produce playable logs. Another program will
    play them back (forwards or backwards) for you, in real-time (or faster, if you choose).

    Any information regarding this ?

    - modified version of tcpdump
    - a program written by Tsutomu was used to produce playable logs

    -naif

    On Wed, May 01, 2002 at 08:58:00PM +0200, Jonas Eriksson wrote:
    >
    > Check out "Kevin On Demand" on Tsutomu's site:
    >
    > http://www.takedown.com/evidence/transcripts/index.html
    >
    >
    > /jonas
    >

    ---------------------------------------------------------------------
    To unsubscribe, e-mail: honeypots-unsubscribesecurityfocus.com
    For additional commands, e-mail: honeypots-helpsecurityfocus.com
    ---------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert
    (SIA) Service. For more information on SecurityFocus' SIA service
    which automatically alerts you to the latest security vulnerabilities.
    Please, see: https://alerts.securityfocus.com/