![snort logo](/images/snort-logo.png)
Snort mailing list archives
Re: Snort Glitch perhaps
From: Jason Haar <Jason.Haar () trimble co nz>
Date: Fri, 07 Mar 2003 07:59:35 +1300
Erek Adams wrote:
If you are surfing into your ACID box and looking at alerts, and Snort just happens to sit on that same net.... Snort will see the pr0n keywords and it will alert on that.... So each time you view an alert, you will get an alert. :-)
I agree on using https to view ACID results, but I alwas run snort as: snort ..... not host $HOSTNAME That stops snort triggering on packets coming from itself. Jason -------------------------------------------------------This SF.net email is sponsored by: Etnus, makers of TotalView, The debugger for complex code. Debugging C/C++ programs can leave you feeling lost and disoriented. TotalView can help you find your way. Available on major UNIX and Linux platforms. Try it free. www.etnus.com
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- snort and gaultlet steve nutt (Mar 05)
- <Possible follow-ups>
- Snort and Gaultlet steve nutt (Mar 05)
- Re: Snort and Gaultlet James Hoagland (Mar 06)
- Snort Glitch perhaps Allan (Mar 06)
- Re: Snort Glitch perhaps Erek Adams (Mar 06)
- Re: Snort Glitch perhaps twig les (Mar 06)
- Re: Snort Glitch perhaps Jason Haar (Mar 06)
- Re: Snort and Gaultlet James Hoagland (Mar 06)