[Bro] VPN Traffic Detection

diogo_c at brturbo.com.br diogo_c at brturbo.com.br
Tue Feb 6 05:38:50 PST 2007


          anyone has ever tested a way to detect VPN Traffic? Could BRO detect the connection initiation? After reading the RFC about ISAKMP I have found some characteristics about this protocol that could help detect it but I don't want to reinvent the wheel and there are other protocols used in VPN tunneling. Ideas anyone??
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20070206/a38f5c53/attachment.html 

More information about the Bro mailing list