RE: Maintaining a "watch list"

["M. Shirk" <shirkdog_linux () hotmail com>]

Well it depends on that technology you have available. With Snort, it is 
pretty easy to create custom rules to output to a different location and do 
something with the data.

But others might chime in if you give an overview of what you have to work 
with.

Shirkdog

-----Original Message-----
From: kangell () alertra com [mailto:kangell () alertra com]
Sent: Wednesday, November 03, 2004 6:04 PM
To: incidents () securityfocus com
Subject: Maintaining a "watch list"
Importance: Low

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today - it's FREE! 
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/