Book123

    Free register and download UseNet downloader, then you can FREE Download from UseNet.

    Download without Limit " Technical Nessus Snort and Ethereal Power Tools Customizing Open Source Security Applications " from UseNet for FREE!

The authors of this book provide the inside scoop on coding the most effective and efficient Snort rules, Nessus plugins with NASL, and Ethereal capture and display filters. When done with this book, you will be a master at coding your own tools to detect malicious traffic, scan for vulnerabilities, and capture only the packets YOU really care about.

Each chapter also contains dozens of working code examples. Snort is an amazingly flexible application with a rules-based engine allowing you to collect and correlate packets based on the rules you design. The Snort rules section of this book teaches you to read, write, and understand these rules for your IDS sensors. You will lean rule development schematics, proper testing procedures, techniques for enhancing the speed of your rules, and tips for using Berkeley Packet Filters and subnet masks within a rule.

The Nessus Attack Scripting Language (NASL) allows you to create self contained scripts for vulnerability scanning using the Nessus engine (nessusd). As such, NASL allows you to write plugins that perform network security checks and almost any other type of network-wide test. In this section, you will learn the intricacies of the ¡°script description¡± and ¡°script body¡±, the NASL Protocol APIs, string manipulation, and much more. Ethereal provides ¡°capture filters¡± which allow you to capture only the packets you are interested in and ¡°display filters¡± which allow you to specify which packets are then shown in Ethereal¡¯s Graphical User Interface. This section teaches you to write capture filters and how to work with tcpdump; host names and addresses; MAC addresses; ports; logical operations; protocols; and protocol fields.

Buy Book at Lowest Price on Amazon

Rating:
2.5 out of 5 by Book123