[Snort-inline-users] Show what Snort-inline is able to do

[Holger M. <gan...@mo...>]

Hi,

As i told i'm working on my Thesis at the FH Cologne.
And you know Students have to know how it work
and they have to show that it work.
My Professor wants to see that.

I got Snort-Inline with ClamAV and a mysqldatabase on
an IP-tabes Firewall. (the Database is in the internal net.)

Is seems that all look well. I testet the Snort/firewall with nessus
and i think ist good. Snort inline fished out over 450 Packets.
I can see that with Base.
And nessus show that only SSH is critcal.

Are there more posibilitys to got Testresults that i can show my Professor?
Especially i want to test the ClamAV preprocessor.
Will wrote that eicar changed their side. How can i test if ClamAV work?

Thank you
Best regards
Holger