[SNORT] Best rule categories to enable/disable

[jchrisos at gmail.com (Jim Chrisos)]

Is this a network sensor or something you have running locally on your
workstation?

On Wed, Sep 30, 2009 at 2:18 AM, Thomas Fischer <tvfischer at gmail.com> wrote:

> So outside of enabling everything, which I can't seem to do as it is
> seriously impairing my network access by slow load times, pictures not
> showing up, IM disconnections, gaming issues.
> Which package rules would you enable or disable to have a safe but
> optimized snort-ids probe?
>
> Cheers
>
> --
> Thomas Fischer
>     email: tvfischer at gmail.com tvfischer at free.fr  twitter.com/FVT
> fvter.wordpress.com
>     IM:  gTalk:tvfischer at gmail.com <gTalk%3Atvfischer at gmail.com>
> MSN:tvfischer at hotmail.com <MSN%3Atvfischer at hotmail.com>
> Y!:tvfischer_FR
>     PGP Key:
> https://keyserver1.pgp.com/vkd/DownloadKey.event?keyid=0x27FBA97646CF2077
>                            -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> Sent from Crosne, France
>
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom at mail.pauldotcom.com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20090930/21b49a74/attachment.htm