Re: Snort book

[Joel Esler <eslerj () gmail com>]

Okay, so Andrew, correct us if we're wrong, but you're looking for a 
book to tell you what the alerts mean?

Joel


On Jun 22, 2005, at 2:06 PM, Willy, Andrew wrote:

> List:
>
> I've been experimenting with Snort for some time now, and finally I 
> got it
> logging to a database, using BASE, tuned (haha, somewhat), listening 
> away to
> our DMZ traffic, generating alerts.
>
> Now I need to figure out what these alerts mean. I know there are alot 
> of
> guides, but I am looking for a suggestion on the easiest reading basic 
> book
> on alerts and tuning.  Ideas?
>
> Thanks
>
> Andrew
> NOTICE OF CONFIDENTIALITY-The information in this email, including
> attachments, may be confidential and/or privileged and may contain
> confidential health information. This email is intended to be reviewed 
> only
> by the individual or organization named as addressee. If you have 
> received
> this email in error please notify Scottsdale Medical Imaging, an 
> affiliate
> of Southwest Diagnostic Imaging, LTD immediately - by return message 
> to the
> sender or to support () esmil com - and destroy all copies of this 
> message and
> any attachments. Please note that any views or opinions presented in 
> this
> email are solely those of the author and do not necessarily represent 
> those
> of Scottsdale Medical Imaging. Confidential health information is 
> protected
> by state and federal law, including, but not limited to, the Health
> Insurance Portability and Accountability Act of 1996 and related
> regulations.
>
>
> -------------------------------------------------------
> SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
> from IBM. Find simple to follow Roadmaps, straightforward articles,
> informative Webcasts and more! Get everything you need to get up to
> speed, fast. http://ads.osdn.com/?ad_id=7477&alloc_id=16492&op=click
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informative Webcasts and more! Get everything you need to get up to
speed, fast. http://ads.osdn.com/?ad_id=7477&alloc_id=16492&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users