netstat command in Unix is always a lower-case, and since shell commands
in Unix are case sensitive, one should just match "netstat", IMO
A.
On 7/17/2012 1:30 PM, Eugene Pefti wrote:
See attached.
*From:*[email protected]
[mailto:[email protected]] *On Behalf Of
*Krishna Nagam
*Sent:* Sunday, July 15, 2012 8:09 AM
*To:* [email protected]
*Subject:* Re: [OSL | CCIE_Security] ips custom signature
hi,
can any one reply this one
On Sat, Jul 14, 2012 at 11:03 PM, Krishna Nagam <[email protected]
<mailto:[email protected]>> wrote:
Hi,
i want to know did any body try this.... if tried please explain me
how to configure this.
IPS :- create new signature 60009 that prevent network attack on LINUX
workstation that will prevent any netstat command, if it match with
this command it should produce high alert and produce log and deny
packet and deny attacker from any future attack.
regards
krishna
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit
www.ipexpert.com
Are you a CCNP or CCIE and looking for a job? Check out
www.PlatinumPlacement.com
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit
www.ipexpert.com
Are you a CCNP or CCIE and looking for a job? Check out
www.PlatinumPlacement.com
