Thread View: osu.network
1 messages
1 total messages
Started by Steve Romig
Mon, 20 Oct 1997 00:00
OSU security meeting, Tcpdump Review Software, Oct 22, 4-6 PM
Author: Steve Romig
Date: Mon, 20 Oct 1997 00:00
Date: Mon, 20 Oct 1997 00:00
61 lines
3839 bytes
3839 bytes
This month's meeting: This month we will be talking about tools for analyzing the contents of network traffic for computer security investigations. It is sometimes useful to record the network traffic pertaining to security incidents so that you can go back and try to discern exactly what the crooks were trying to do and how they did it. We do this at times at OSU when we investigate security intrusions on our systems. In some investigations from the last year we accumulated over 20 gigabytes of log files. The complexity of these logs, as well as the overwhelming amount of information this represents encouraged us to write better tools for viewing and summarizing logs of packet contents. We call this software system "review", since we use it for reviewing our packet log files. Steve Romig will talk about these logs and the review software. At the very least we will cover some "screen shots" showing how the software works and what it can do, with luck we will also have a live demo. The meeting will be on Wednesday October 22 from 4-6 PM in Baker Systems 120. Attendance is open to the public. Note that there has been more than the usual bit of construction around the Woody Hayes/Tuttle park intersection, so getting to the Northwest Parking Ramp itself might be interesting. Looks like you can approach it from either Woody Hayes (heading East) or Tuttle (either direction) now, but I don't know what will change this week or not. Next month: Note that next month we are rescheduling the meeting due to the Thanksgiving holiday. We will be meeting on November 19th, from 1-5 PM, somewhere on campus. This will be a special meeting - we're bringing in a pair of speakers from University of Michigan to give a presentation about the technical and legal aspects of logging and monitoring, which should prove to be quite interesting. I will send out more detailed information, including speaker biographies and a location. as soon as I have that all put together. We will also be rescheduling the December meeting, but I do not have a date, topic or speaker locked down for that yet. Stay tuned... About these meetings: The Network Security Group meetings are usually held on the fourth Wednesday of each month from 4-6 PM on the Ohio State University main campus in Columbus (usually in Baker Systems 120). The goal of our meetings is to share information about computer security tools, practices and problems. Anyone and everyone are invited to attend. We also have mailing lists for people who are interested in discussing network security issues, or who just want announcements about meetings and security bulletins. Send mail to netwog-security-request@lists.net.ohio-state.edu for more information. --- Steve
Thread Navigation
This is a paginated view of messages in the thread with full content displayed inline.
Messages are displayed in chronological order, with the original post highlighted in green.
Use pagination controls to navigate through all messages in large threads.
Back to All Threads