Display and Capture Filters Defined

[marco25]

I am using Sniffer For and Distributed of Nai at little time and it would like help to find files of filters for virus analysis and other packages and that could be loaded to the program.
As a library of filters.

 

[rwullems]

Hi,
There are some on sniffer.com, but a nice library of filters can be downloaded from

http://www.packet-level.com

regards,
Robert Robert A.H. Wullems
Sniffer University Instructor
SCM / CNX / MCP
Citee Education
the Netherlands

 

[wybnormal]

While Laura's filters are great, you really need to study her book (Packet Filtering, Catching the Cool Packets) and learn how to make your own filters. It's not that hard..even with NAI's Sniffer There are some other Sniffer programs that lend themselves to custom filters easier.

You can snarf the signatures needed from Snort's website of sigs and use the strings that you need. You will have to play with the offsets on some though so we end back at learning how to make these things.

MikeS
Find me at

http://www.packetattack.com

"Take advantage of the enemy's unreadiness, make your way by unexpected routes, and attack unguarded spots."
Sun Tzu

 

[rwullems]

okay, sorry, hve that book myself, forgot to mention it, it is really not bad.
Robert Robert A.H. Wullems
Sniffer University Instructor
SCM / CNX / MCP
Citee Education
the Netherlands