From: vishal_nitr <vis...@re...> - 2008-06-26 14:53:13
|
Hi Joel, Thanks for the reply but when I opened voip.rules or bleeding-voip.rules all I could see was rules casted against port no 5060 which is the port used by SIP protocol and these rules may block the SIP based voip traffic. But there are some other voip applications which use H.323 or like cisco applications which their own propriatry protocol and again there is this famous skype application which uses their own protocols for VoIP. How can we block these applications at packet level ?On Thu, 26 Jun 2008 09:16:47 -0400 Joel Esler wroteThere is a whole set of rules for VOIP. voip.rules distributed from snort.orgJOn Jun 26, 2008, at 4:09 AM, vishal_nitr wrote:Hi ALL, Can snort IPS detect VOIP traffic and block it? is there any rule available for it ?Thanks and Regards,Vishal Kotalwar,Software Engineer,Aricent,Chennai-35.09884074047.-------------------------------------------------------------------------Check out the new SourceForge.net Marketplace.It's the best place to buy or sell services forjust about anything Open Source.http://sourceforge.net/services/buy/index.php_______________________________________________Snort-inline-users mailing lis...@li...https://lists.sourceforge.net/lists/listinfo/snort-inline-users--Joel Esler joe...@ma... http://blog.joelesler.net[m] Thanks and Regards, Vishal Kotalwar, Software Engineer, Aricent, Chennai-35. 09884074047. |