OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Frank Knobbe (fknobbe_at_knobbeits.com)
Date: Wed Aug 07 2002 - 13:04:41 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Wed, 2002-08-07 at 09:57, Dave Robinson wrote:
    > Hi all,
    >
    > I've been using SnortSam for my firewall blocking. I've got a number of
    > PIX's and Cisco routers. It seems to work fine on the routers, but not
    > on the PIX. I've sniffed the traffic and it seems to telnet into the
    > PIX, enter the telnet password, type "enable", but when the PIX prompts
    > for a password, Snortsam does nothing. Has anyone else seen this
    > before?
    >
    > Thanks,
    > Dave

    Dave,

    if you encounter problems with SnortSam, please let me know about them.
    Could you send me a packet trace please? Snortsam should wait until it
    get a # back from the PIX and then issue the shun command. Let's take a
    look at the trace and see what your PIX says.

    Thanks,
    Frank

    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.0.7 (GNU/Linux)

    iQCVAwUAPVFhOb+0ijK5TGa5AQIWAwQAmGXf2C10J39uX5CfQ3EwUmLX4Gz6YJ0Y
    VYwLxllou+q+A4TxIXXOvVlJLNW8lCvoeOQwz3jefrGKbf5ySHlYjcjz2C5gVJvh
    2KXRCfe8CMKpSCwV52x41OgbNmHIzsV1vI7ej7JuqV/PEx2FdoQuCfrg+OLmKTGE
    m6uLXJAuwFA=
    =2aOK
    -----END PGP SIGNATURE-----

    -------------------------------------------------------
    This sf.net email is sponsored by:ThinkGeek
    Welcome to geek heaven.
    http://thinkgeek.com/sf
    _______________________________________________
    Snort-users mailing list
    Snort-userslists.sourceforge.net
    Go to this URL to change user options or unsubscribe:
    https://lists.sourceforge.net/lists/listinfo/snort-users
    Snort-users list archive:
    http://www.geocrawler.com/redir-sf.php3?list=snort-users