Re: any other tool to detect worm?

dcneting <ansiry_at_tm.net.my> writes:

> is there any tools that i can use to just detect worm-like activity besides
> that using honeyd? if there is, how can i use it to detect worms(known and
> unknown) preferably open source platform.

A lot of worms will show up in snort - via signatures (e.g Welchia) or
they will appear in the portscan.log file (e.g. Blaster).

cheers,
 Jamie

-- 
James Riden / j.riden_at_massey.ac.nz / Systems Security Engineer
GPG public key available at: http://www.massey.ac.nz/~jriden/
This post does not necessarily represent the views of my employer.