Get short, timely messages from Alec R Waters.

Twitter is a rich source of instantly updated information. It's easy to stay updated on an incredibly wide variety of topics. Join today and follow @AlecRWaters.

Get updates via SMS by texting follow AlecRWaters to 40404 in the United States
Codes for other countries

Country	Code	For customers of
Two-way (sending and receiving) short codes:
Australia	0198089488 Telstra
Canada	21212 (any)
United Kingdom	86444 Vodafone, Orange, 3, O2
Indonesia	89887 AXIS, 3, Telkomsel
Ireland	51210 O2
India	53000 Bharti Airtel, Videocon
Jordan	90903 Zain
New Zealand	8987 Vodafone, Telecom NZ
United States	40404 (any)

AlecRWaters

remor Thanks to Victor from the Yara project for changing the license to the Apache license. Now @Bro_IDS can integrate it. code.google.com/p/yara-project/ 8:30 AM May 22nd via Twitter for Mac Retweeted by AlecRWaters and 6 others
LucasErratus "..these two methods have underscored for me the need for both host-based network-based detection." mnd.tt/1fymj 9:20 AM May 16th via web Retweeted by AlecRWaters and 1 other
@srunnels Thanks :) 8:38 AM May 14th via web in reply to srunnels
@dougburks I don't want to miss out on something just because there's a missing FIN or whatever. 7:55 AM May 14th via TweetDeck in reply to dougburks
@dougburks Whichever tool does it I want there to be a searchable artefact of something, even if the TCP session is incomplete or malformed. 7:54 AM May 14th via TweetDeck in reply to dougburks
@dougburks The same kind of questions can be asked about SANCP vs netflow vs Bro conn logs, etc. 7:43 AM May 14th via web in reply to dougburks
@dougburks Can't help but wonder if it would be different comparing the logs from live traffic rather than pcaps. 7:33 AM May 14th via web in reply to dougburks
@dougburks Yes, they certainly surprised me. I did it on a couple of 128MB pcaps with similar results. 7:32 AM May 14th via web in reply to dougburks
The Adventures of Packet Tracy, PI - j.mp/KgyGnx 6:47 AM May 14th via TweetDeck
dougburks Security Onion 20120511 now available! Migrates from httpry/httpry_agent to Bro/http_agent! bit.ly/LWTl42 #securityonion #nsm 5:24 AM May 10th via TweetDeck Retweeted by AlecRWaters and 13 others
@MartinDigon Joy! Am looking forward to it already. 4:04 AM May 8th via TweetDeck in reply to MartinDigon
@MartinDigon Make the bleeping stop! :) 3:42 AM May 8th via web
@lbhuston Get out the acoustic coupler and use ATDP :) 3:35 PM Apr 30th via TweetDeck in reply to lbhuston
@lbhuston AT+CMGF and AT+CMGS - turn that old Nokia into an SMS notification system 3:30 PM Apr 30th via TweetDeck in reply to lbhuston
Blog post - Newtonian Justice From Above - Hacker Countermeasures, 1984 style: j.mp/IhCK53 2:49 PM Apr 30th via TweetDeck
Wait.. What do you mean, @BSidesLondon isn't a weekly event?!?!? 8:44 AM Apr 30th via TweetDeck
Had a great time at @BSidesLondon yesterday. Many thanks to @GeekChickUK @mwrinfosecurity and everyone else who made it work 5:47 AM Apr 26th via TweetDeck
Security implications of #IPv6 on IPv4 networks: j.mp/JnAI4O . Mentions j.mp/JnAGKf 7:26 AM Apr 24th via TweetDeck
Splunking the Onion eyeis.net/2012/04/splunk… via @bradshoop 7:28 AM Apr 16th via Tweet Button
@whelkaholism Whilst you quibble with Monkey World about their policy of admitting apes, I'll be digging anti-tank ditches. 1:16 PM Apr 11th via TweetDeck in reply to whelkaholism