virus-tracing with snort?

[Steffen "Maetzky (extern)" <Steffen.Maetzky () gedas de>]

Hi,

Someone ask me, if it is possible to use snort to find out on which way
a special virus has come into his net (or how it spreads) and I couldn't
answer this question, exactly.

I think it is possible to "trace" viruses which can be detected by
pattern matching, but how to detect other viruses?

Which possibilities does snort have?
Any known plugins, addons?
Any known open-source-tools which do that job?
Some good documents known?

Regards,

Steffen 







-------------------------------------------------------
This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek
For a limited time only, get FREE Ground shipping on all orders of $35
or more. Hurry up and shop folks, this offer expires April 30th!
http://www.thinkgeek.com/freeshipping/?cpg=12297
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users