Ethereal-users: RE: [Ethereal-users] Ethereal use on hack attack?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "HOOD, Andy" <ahood@xxxxxxxxxxxxxx>
Date: Thu, 27 Mar 2003 18:04:05 +1100
> -----Original Message-----
> From: Greg Strong
> 
> Can Ethereal be used to filter outbound info for information 
> on a hacked
> system for what and where (URL) it is going?
> 

Snort would probably be better for that.

http://www.snort.org/ snort home page
http://www.sans.org/resources/idfaq/snort.php using snort with Windows

Regards,
Andrew Hood
A distributed system is one in which the failure of a computer you
didn't even know existed can render your own computer unusable. --
Leslie Lamport, as quoted in CACM, June 1992

<<application/ms-tnef>>