Re: IDS Tuning

[Joel Esler <eslerj () gmail com>]

The Most basic steps in tuning your Snort IDS is to go to your  
snort.conf and fill our your variables.  "HOME_NET",  
"HTTP_SERVERS"...etc..

J
On Mar 9, 2006, at 3:49 PM, Naveen Sharma wrote:

> Hi All,
>
> What exactly is  IDS tuning ? Please provide steps to tune Snort.
>
> Thanks in advance.
>
> Cordial regards
>
> Naveen
>
>
>
> ---------------------------------------------------------------------- 
> --
> Test Your IDS
>
> Is your IDS deployed correctly?
> Find out quickly and easily by testing it with real-world attacks  
> from CORE IMPACT.
> Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus- 
> ids_040708 to learn more.
> ---------------------------------------------------------------------- 
> --


------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
------------------------------------------------------------------------