thnx, that's what i've been looking for....

From: "Phil Regnauld" <[EMAIL PROTECTED]>
To: "Donatas" <[EMAIL PROTECTED]>
Cc: <freebsd-net@freebsd.org>
Sent: Monday, June 27, 2005 10:19 AM
Subject: Re: layer7 filtering


> Donatas (donatas) writes:
>> I wonder if there's any person who did some scripting like 
>> application layer analysis with network sniffer (like tcpdump) + apropriate 
>> firewall rule generation(like statefull ipfw rules) ?
> 
> You mean this ?
> 
> http://www.hsc.fr/ressources/outils/nstreams/
> 
> Nstreams is a program which analyzes the streams that occur on a
> network. It displays which streams are generated by the users between
> several networks, and between the networks and the outside. It can
> optionally generate the ipchains or ipfw rules that will match these
> streams, thus only allowing what is required for the users, and nothing
> more.
> 
> Nstreams can parse the tcpdump output, or the files generated
> with the -w option of tcpdump. It can also directly sniff
> the data that occurs on the network.
> 
> This product was designed by HSC and coded by Renaud Deraison
> ([EMAIL PROTECTED]), author of the Nessus software.
> It is available for free under GNU license.
> 
> 
> 
> _______________________________________________
> freebsd-net@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-net
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
>
_______________________________________________
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to