Snort mailing list archives

Re: Rules


From: Neil Dickey <neil () geol niu edu>
Date: Fri, 17 Aug 2001 16:29:03 -0500 (CDT)


Scott Pham <spham () incellico com> wrote asking:

I'm currently having some serious problems with my snort server setup. It's 
current;y logging everything. ICMP from my own subnet. Where is a good site 
to learn about rules writing. And to learn more on snort in general. Thanks 
for the info !!

Visit the Snort site at:

  http://snort.sourcefire.com/

Look for "Documentation" on the left side of the page.  The "Documentation"
page has links to rules-writing tutorials, as well as many other aspects of
Snort operations.

Best regards,

Neil Dickey, Ph.D.
Research Associate/Sysop
Geology Department
Northern Illinois University
DeKalb, Illinois
60115

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: