LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 04-07-2005, 01:48 AM   #1
majeztik
Member
 
Registered: Apr 2003
Location: Sydney
Distribution: Gentoo
Posts: 56

Rep: Reputation: 15
packet filtering


hi guys,

I admin a LAN every few months with about 200 ppl attending. Ofcourse the guys that come bring the blaster worm & varients with them.

Is it possible to setup some kind of packet filtering so that we can find who is broadcasting so that we can shut them down? I was thinkin along the lines of ethereal or something.

thanx in advance

>josh
 
Old 04-07-2005, 03:18 AM   #2
Capt_Caveman
Senior Member
 
Registered: Mar 2003
Distribution: Fedora
Posts: 3,658

Rep: Reputation: 69
An IDS like snort or snort-inline is probably a good way to do it, especially if you want to have updateable signatures rather than just static rules. Ethereal will show you real-time captures, but unless you can identify malware by looking at raw packet payloads, then it likely won't be as effective.
 
Old 04-09-2005, 01:34 AM   #3
razan
LQ Newbie
 
Registered: Jan 2005
Location: Unix planet
Posts: 28

Rep: Reputation: 15
Talking HI

if u r using the iptables as firewall command and router then u can find from the following


use tail -f /var/log/message

this command will show all the continiou packets that has been generated by.

find out which source is generating the broad cast packets. and catch it for further filtering/investigation.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Packet filtering firewall Maintech Slackware 3 10-30-2005 11:34 AM
ipv6 packet filtering reddy_pradeep Solaris / OpenSolaris 0 09-15-2005 11:27 PM
Packet Filtering empre55 Linux - Newbie 1 03-20-2005 09:10 AM
Packet Filtering Firewall empre55 Linux - Networking 1 03-20-2005 08:35 AM
Packet Filtering simmid Linux - Networking 0 09-18-2001 02:05 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 07:54 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration