[VOIPSEC] VOIP and IDS

[Nils Ohlmeier]

On Tuesday 12 July 2005 21:37, Smith, Donald wrote:
> Has anyone already written up snort sigs for tools like sipsak or protos
> h323/sip test suites?
> That might be worth the effort:)

As the author of sipsak I would also be interested in that :-)
But be aware that sipsak's main purpose is helpfull testing and debugging. 
That you can send any file content with it brings it also to the edge of 
being nasty or dangerous. But I guess reliable sigs for SIP in general, and 
especially for sipsak and protos, are hard to write.

Regards
  Nils Ohlmeier
-- 
snom technology AG            Gradestr. 46    D-12347 Berlin
Nils Ohlmeier
mailto:nils.ohlmeier at snom.de  http://www.snom.com