September 2002
Intermediate to advanced
480 pages
11h 47m
English
This ASCII text file was created by the honeypot BackOfficer Friendly BOF discussed in Chapter 6. This demonstrates how you can convert the attacks captured by BOF and displayed on the menu into a ASCII file. This makes it easier to read attacks logged by BOF and analyze the data. For example, here we see attacks over a four-day period, from November 10 to November 13, 2001. The vast majority of attacks are probes looking for Microsoft IIS Web server vulnerabilities. These most likely are scripted attacks being launched from different attackers. However, the same tool is most likely being used, since we consistently see the same attack signatures. We also see several probes made against FTP. ...
Read now
Unlock full access