[Dshield] Cisco 0wn3d??

Frank Knobbe frank at knobbe.us
Fri Aug 5 21:35:16 GMT 2005


On Fri, 2005-08-05 at 14:24 -0400, Rob wrote:
> This (like anything else) is not going to catch everything.  However, it
> will detect any "logon" activity regardless of the method used (assuming it
> is not encrypted). 

Gotcha. I believe we also have several Cisco related Snort sigs in our
BleedingSnort project at www.bleedingsnort.com, such as when a Cisco
device is in config mode or has a successfully reloaded a config.

Cheers,
Frank

-- 
Ciscogate: Shame on Cisco. Double-Shame on ISS.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: This is a digitally signed message part
Url : http://www.dshield.org/pipermail/list/attachments/20050805/7e6646a7/attachment.bin


More information about the list mailing list