RE: Re: Snortsnarf sux, snort_stat rulez

["Sheahan, Paul (PCLN-NW)" <Paul.Sheahan () priceline com>]

Snort_stat also helps one to quickly decide what incidents are worth
investigating further. Within one minute of looking at the report, which I
have sent to my inbox at midnight each night, I can immediately see what I
need to research further. And with all of the other variations the report
gives you, it is the best of both worlds. I removed Snortsnarf from my drive
once I made the comparison.

I think there should definitely be a link off the Snort page for snort_stat
considering how useful the tool is.....


-----Original Message-----
From: Yen-Ming Chen
To: snort-users () lists sourceforge net
Sent: 8/23/01 11:38 PM
Subject: [Snort-users] Re: Snortsnarf sux, snort_stat rulez

Hi,
        I think that everyone can choose to use any tool that fits the
need and
see whether you like it or not. It's everyone's freedom to choose. :) 
Snort_stat and Snortsnarf did have different goals when first developed.

Therefore, I appreciate your favor in snort_stat.pl, and I believe that
both
tools can help you under different circumstances when you're using snort
as your
NIDS choice.

        The newest snort_stat.pl is at:

        http://xanadu.incident.org/snort/

I just put 1.15.2.6, which is a bug fix version. And thanks to Paul for
this 
bug report.

--
Yen-Ming Chen

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users