[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
detecting ftp/www conn. in all routed streams
- To: firestorm@xxxxxxxxxx
- Subject: detecting ftp/www conn. in all routed streams
- From: Banai Zoltan <bazooka@xxxxxxxxx>
- Date: Tue, 16 Apr 2002 18:06:12 +0200
- Delivered-to: mailing list firestorm@ecsc.co.uk
- Mailing-list: contact firestorm-help@ecsc.co.uk; run by ezmlm
- User-agent: Mutt/1.3.20i
HI!
I have a question:
Is it possible to detect ftp and http session in all routed connecions
with firestorm?
I have a subnet where is need to detect ftp and http connections to
ftp/www servers in our subnet(to _any_ port).
So i think there is need to reassembly all tcp streams and
analyze if the connection is that type.
Best, Banai