Re: Investigation- Web pages visited

From: Brian Loe (knobdy_at_gmail.com)
Date: 11/02/05

  • Next message: Brian Loe: "Re: remote desktop question"
    Date: Wed, 2 Nov 2005 15:57:52 -0600
    To: Steve Barron <thurgoodj187@hotmail.com>
    
    

    Isn't this more of a place for a proxy server - IDS being more for
    intrusion detection and blocking?

    On 11/2/05, Steve Barron <thurgoodj187@hotmail.com> wrote:
    > Hi
    >
    > I am trying to investigate some possible corporate policy violations, mostly
    > involving porn. My IDS matches rules for certain criteria and looks for
    > banned words in html. When I get the ip, i can query it, but most of the
    > time I get info about a hosting provider. When I attempt to access the ip
    > http://155.X.X.X i get either some generic page or a 404 error. Is there
    > any way to find out what sites are hosted at a given IP? My logs have not
    > been much help for this.
    >
    > Thanks
    >
    > Steve
    >
    >
    >


  • Next message: Brian Loe: "Re: remote desktop question"

    Relevant Pages

    • Re: IPS Implementaion
      ... I also recommend monitoring and blocking different traffic differently. ... critical traffic on the networks with the IPS. ... At this point a small IDS staff should not turn on ... Some large organizations have formal change control procedures. ...
      (Focus-IDS)
    • Re: Newbie question: autoblocking with IDS/IPS
      ... intend to put them through their paces in our lab. ... we'll take it on a signature by signature basis. ... We're not 100% convinced we'll put them in blocking mode at this point. ... Test Your IDS ...
      (Focus-IDS)
    • Re: Blocking
      ... Just keep blocking his new IDs. ... for now I'm no longer seeing him. ... Barbara Carlson. ...
      (alt.support.diabetes)
    • Re: how can I find researches ...
      ... >can I finde open problems in IDs or researches on it?is there any special ... Agents which will help you further. ... An Immunological Approach to Distributed Network Intrusion Detection ... Distributed Intrusion Detection Systems: An Introduction and Review ...
      (Focus-IDS)
    • RE: IDS vs. IPS deployment feedback
      ... Totally agree with you Intrusion Detection is not dead. ... IPS is a great benefit, but if you have a network that changes then it ... you still have to run it in an IDS mode to ... Much of the rhetoric and push for deploying IPS devices that are ...
      (Focus-IDS)