Snort mailing list archives
Re: No alert_smb in 2.1.0?
From: Frank Knobbe <frank () knobbe us>
Date: Fri, 19 Dec 2003 21:38:29 -0600
On Fri, 2003-12-19 at 13:39, Matt Kettler wrote:
* configure.in: - removed smb alerting since it should be moved to barnyard
That's ridiculous. SMB alerts (like SNMP alerts) are a single UDP packet. Database stuff taxes the system much more. Will spo_database be removed in favor of Barnyard as well? Perhaps we should remove all non-filesystem plugins..... geesh.... Regards, Frank (feeling grumpy tonight ;)
Attachment:
signature.asc
Description: This is a digitally signed message part
Current thread:
- No alert_smb in 2.1.0? Mike Maki (Dec 19)
- Re: No alert_smb in 2.1.0? Matt Kettler (Dec 19)
- Re: No alert_smb in 2.1.0? Frank Knobbe (Dec 20)
- Re: No alert_smb in 2.1.0? Brian (Dec 20)
- question about spp stream4 retransmission Michel Christophe (Dec 20)
- Re: No alert_smb in 2.1.0? Frank Knobbe (Dec 20)
- Re: No alert_smb in 2.1.0? Frank Knobbe (Dec 20)
- Re: No alert_smb in 2.1.0? Matt Kettler (Dec 19)