Dsniff/mailsnarf

2004-02-24 Thread tps
I've been asked to place a sniffer on a network that handles HIPPA data, and watch for e-mail containing certain strings. I figured that mailsnarf would be the best way to do this. Right. In testing, if I run: mailsnarf -i eth2 . tcp I get all email. If I run mailsnarf -i eth2 .*STD.* tcp,

Re: Dsniff/mailsnarf

2004-02-24 Thread tps
On Tue, Feb 24, 2004 at 06:19:48PM -0500, John Keimel wrote: On Tue, Feb 24, 2004 at 06:11:20PM -0500, [EMAIL PROTECTED] wrote: I've been asked to place a sniffer on a network that handles HIPPA data, and watch for e-mail containing certain strings. I figured that mailsnarf would be the

Re: Dsniff/mailsnarf

2004-02-24 Thread tps
On Tue, Feb 24, 2004 at 05:20:01PM -0600, elijah wright wrote: I've been asked to place a sniffer on a network that handles HIPPA data, and watch for e-mail containing certain strings. I figured that mailsnarf would be the best way to do this. Aside from any of hte technical

Dsniff/mailsnarf

2004-02-24 Thread tps
I've been asked to place a sniffer on a network that handles HIPPA data, and watch for e-mail containing certain strings. I figured that mailsnarf would be the best way to do this. Right. In testing, if I run: mailsnarf -i eth2 . tcp I get all email. If I run mailsnarf -i eth2 .*STD.* tcp,

Re: Dsniff/mailsnarf

2004-02-24 Thread tps
On Tue, Feb 24, 2004 at 06:19:48PM -0500, John Keimel wrote: On Tue, Feb 24, 2004 at 06:11:20PM -0500, [EMAIL PROTECTED] wrote: I've been asked to place a sniffer on a network that handles HIPPA data, and watch for e-mail containing certain strings. I figured that mailsnarf would be the

Re: Dsniff/mailsnarf

2004-02-24 Thread tps
On Tue, Feb 24, 2004 at 05:20:01PM -0600, elijah wright wrote: I've been asked to place a sniffer on a network that handles HIPPA data, and watch for e-mail containing certain strings. I figured that mailsnarf would be the best way to do this. Aside from any of hte technical

Re: Attempts to poison bayesian systems

2003-12-23 Thread tps
On Tue, Dec 23, 2003 at 01:25:30PM +, Dale Amon wrote: I've been noticing loads of mails like this lately: Date: Sun, 21 Dec 2003 16:25:34 +0500 From: Joseph Jenkins [EMAIL PROTECTED] Subject: Re: MIT, rest in peace! To: [EMAIL PROTECTED] X-Mailer: mPOP Web-Mail 2.19

Re: Attempts to poison bayesian systems

2003-12-23 Thread tps
On Tue, Dec 23, 2003 at 01:25:30PM +, Dale Amon wrote: I've been noticing loads of mails like this lately: Date: Sun, 21 Dec 2003 16:25:34 +0500 From: Joseph Jenkins [EMAIL PROTECTED] Subject: Re: MIT, rest in peace! To: [EMAIL PROTECTED] X-Mailer: mPOP Web-Mail 2.19

Re: snort, where to listen?

2003-05-15 Thread tps
On Fri, May 16, 2003 at 09:49:32AM +0200, [EMAIL PROTECTED] wrote: Hi all, I just installed Snort IDS on my firewall Debian box which is so configured: eth0 10.0.0.1 (serves internal LAN) eth1 192.168.100.1 (directly connected to an ADSL modem auto-connecting to the provider with IP

Re: HELP, my Debian Server was hacked!

2003-04-24 Thread tps
On Thu, Apr 24, 2003 at 04:02:56AM +0100, Dale Amon wrote: On Wed, Apr 23, 2003 at 10:44:34AM -0400, James Duncan wrote: Obviously steps should be in place to mitigate the damage of these sorts of acts. Have steps in place to quickly replace machines that have to be removed from production

Re: machine monitoring packages

2003-02-13 Thread tps
On Thu, Feb 13, 2003 at 02:59:26PM +, gabe wrote: I would like to know what ppl think is the best package for monitor servers, at my last work place they were installing mon. In my new job they use Nagios, which I'm not to sure about due to the fact that installation / configuration

Re: machine monitoring packages

2003-02-13 Thread tps
On Thu, Feb 13, 2003 at 02:59:26PM +, gabe wrote: I would like to know what ppl think is the best package for monitor servers, at my last work place they were installing mon. In my new job they use Nagios, which I'm not to sure about due to the fact that installation / configuration

Re: securing pop3

2003-02-08 Thread tps
On Sat, Feb 08, 2003 at 03:23:33PM +0100, Kristof Goossens wrote: Hello all, I need to make a pop3 account on my server. I intend to work with ipop3d to provide secure pop3 service. Now I want to provide this service for only few people, and I don't want them to have an account on the