<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>InfoSecPodcast.com &#187; Honyepot / Honeynet</title>
	<atom:link href="http://www.infosecpodcast.com/category/security/honyepot-honeynet/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.infosecpodcast.com</link>
	<description>Information Security related news, opinions and ramblings</description>
	<lastBuildDate>Sun, 25 Jul 2010 13:04:23 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
		<item>
		<title>SANS Packet Analysis Challenge</title>
		<link>http://www.infosecpodcast.com/2006/07/sans-packet-analysis-challenge/</link>
		<comments>http://www.infosecpodcast.com/2006/07/sans-packet-analysis-challenge/#comments</comments>
		<pubDate>Thu, 27 Jul 2006 20:14:10 +0000</pubDate>
		<dc:creator>Chris Harrington</dc:creator>
				<category><![CDATA[Honyepot / Honeynet]]></category>
<category>forensic</category><category>honeynet project</category><category>storm center</category>
		<guid isPermaLink="false">http://www.infosecpodcast.com/honyepot-honeynet/2006/07/sans-packet-analysis-challenge/</guid>
		<description><![CDATA[SANS Internet Storm Center posted some packets for analysis. This time they are DNS packets that had a destination of a primary DNS server. They are in raw packet format. Here is the challenge. If you are up for a bigger challenge you could try the Scan of the Month (SOTM) over at the Honeynet [...]]]></description>
			<content:encoded><![CDATA[<p>SANS Internet Storm Center posted some <a target="_blank" href="http://isc.sans.org/diaryimages/Strange%20DNS.pcap">packets</a> for analysis. This time they are DNS packets that had a destination of a primary DNS server. They are in raw packet format. Here is the <a target="_blank" href="http://isc.sans.org/diary.php?storyid=1511&#038;rss">challenge</a>.</p>
<p>If you are up for a bigger challenge you could try the <a target="_blank" href="http://www.honeynet.org/scans/index.html">Scan of the Month</a> (SOTM) over at the Honeynet Project. There hasn&#8217;t been a new scan for a while but if want to sharpen your network forensic / sleuthing skills a bit give one a try. They post the top 3 submitted analyses as well as an official explanation.</p>
<p>&#8211;Chris</p>
<p>Technorati Tags: <a href="http://technorati.com/tag/SANS" rel="tag"> SANS</a>, <a href="http://technorati.com/tag/packet+analysis" rel="tag"> packet analysis</a>, <a href="http://technorati.com/tag/DNS" rel="tag"> DNS</a>, <a href="http://technorati.com/tag/honeynet" rel="tag"> honeynet </a></p>
<div id="crp_related"><h2>Related Posts:</h2><ul><li><a href="http://www.infosecpodcast.com/2006/11/list-of-malware-analysis-tool-from-sans/" rel="bookmark" class="crp_title">List of Malware Analysis tool from SANS</a></li><li><a href="http://www.infosecpodcast.com/2006/07/exploits-in-the-wild-for-recent-microsoft-vulnerabilities/" rel="bookmark" class="crp_title">Exploits in the wild for recent Microsoft vulnerabilities</a></li><li><a href="http://www.infosecpodcast.com/2006/08/check-if-nsa-is-looking-at-your-traffic/" rel="bookmark" class="crp_title">Check if NSA is looking at your traffic???</a></li><li>Powered by <a href="http://ajaydsouza.com/wordpress/plugins/contextual-related-posts/">Contextual Related Posts</a></li></ul></div><img src="http://www.infosecpodcast.com/?ak_action=api_record_view&id=19&type=feed" alt="" />]]></content:encoded>
			<wfw:commentRss>http://www.infosecpodcast.com/2006/07/sans-packet-analysis-challenge/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
