Re: "trons" Rules

[Jeff Nathan <jeff () snort org>]

Jeff Dell wrote:
> If you check out Robert Grahams website, you will see that he talks
> about BlackICE using snort Signatures..
>
> <clip from http://robertgraham.com/pubs/ids/trons.html>
>
> What is TRONS?
> TRONS is an independent IDS subsystem in BlackICE that reads in
> Snort-like signatures. TRONS is currently an unsupported feature. If you
> contact tech support, they will know less about it than what's on this
> webpage. TRONS has not been tested; bad stuff may happen if you use it.

TRONS is about 4 months old now.  It doesn't perform stream reassembly
or IP defragmentation.

-Jeff

-- 
http://jeff.wwti.com            (pgp key available)
"Common sense is the collection of prejudices acquired by age eighteen."
- Albert Einstein

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users