|
Posted by Wolfgang Kueter on November 30, 2004, 11:29 pm
If you were Registered and logged in, you could reply and use other advanced thread options
joe wrote:
> I have an iMac G3 at home hooked up to a cable modem. I¹m concerned about
> apps or spyware that might be connecting to the internet without my
> knowledge.
man netstat. Apart from that: Why do you install/runsoftware, you don't
trust?
> I¹ve got Snort running (via Henwen, a mac gui for snort) and
> would like to configure it to alert me to any outgoing network requests.
A gateway is a much better place for a snort sensor.
> Is there a Snort rule that might do this?
There are many rules, that can do this. It depends on the configuration of
the sensor. Again: A gateway between your box and the other network
(probably the internet) is the much better place for the sensor.
> I have a VERY minimal understanding of Snort and NIDS.
Reading the documentation on http://www.snort.org might help.
Wolfgang
| 
XML site map