[Intrusions] LOGS: GIAC GCIA Version 3.4 Practical Detect Ryan C. Barnett

[Barnett, Ryan C. (EDS)]

Greetings All,
I am submitting this information as part of the GCIA Practical Assignment.  For my practical, I received authorization to use the data that I gathered during my sponsorship of the Honeynet Project's Scan of the Month Challenge for April 2004 entitled Open Proxy Honeypot - http://www.honeynet.org/scans/scan31/

The logs analyzed for the network detects section were from the various Apache logs in this archive - http://www.honeynet.org/misc/files/apache_logs.tar.gz

**************
NETWORK DETECT - Web Server Fingerprinting Test from a Nessus Scan
**************

Due to formatting issues often encountered with submitting WORD doc data to this mail-list, I have opted to simply include a web link in this email to point to my document on my honeypots site on sourceforge.

http://honeypots.sourceforge.net/Ryan_Barnett_GCIA_Ver34_Practical_Network_Detect.doc

Thanks for your time,

Ryan C. Barnett
SANS: GCFA, GCIH, GCUX, GSEC