Snort mailing list archives
RE: Question about snortsnarf
From: Paul Schmehl <pauls () utdallas edu>
Date: 13 Feb 2003 13:04:09 -0600
On Thu, 2003-02-13 at 11:10, James Hoagland wrote:
That is correct, since SnortSnarf draws some correlation across the all the alerts, it doesn't output anything until it has read everything it.
Thanks, Jim. I'll post in the right list from now on. :-) -- Paul Schmehl (pauls () utdallas edu) Adjunct Information Security Officer The University of Texas at Dallas http://www.utdallas.edu/~pauls/ AVIEN Founding Member ------------------------------------------------------- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Question about snortsnarf Schmehl, Paul L (Feb 12)
- <Possible follow-ups>
- Re: Question about snortsnarf Eric Joe (Feb 12)
- RE: Question about snortsnarf Schmehl, Paul L (Feb 12)
- RE: Question about snortsnarf James Hoagland (Feb 13)
- RE: Question about snortsnarf Paul Schmehl (Feb 13)
- RE: Question about snortsnarf Eric Joe (Feb 13)
- RE: Question about snortsnarf James Hoagland (Feb 13)