> From: Frank Knobbe [mailto:[EMAIL PROTECTED]]
> >From: [EMAIL PROTECTED]
> >[mailto:[EMAIL PROTECTED]] Sent: Wednesday, August
> >23, 2000 7:49 PM
> >
< difference between SMTP & Telnet deleted >
>
> Which can easily be defeated with tools like Netcat that spit out a
> whole packet full of data. Is anyone aware of an IDS or firewall
> software that detects the time difference in these packets (manually
> entered data lags behind).
>
Interesting idea. However, one could argue that IP isn't deterministic
enough to be able to use this as a reliable IDS metric. So many false
positives already...
Ken Seefried, CTO & Founding Partner, DigitalMoJo
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
