Automating ACID to refer to arachNIDS through archive.net

[wfenwick () mail entrenet com]

I am using ACID to manage my alert information.

When Whitehats went away it really hurt my junior guys, so we fixed it (sorta).

Archive.net has an archive of old sites. It's slow, it's not a one-for-one
URL mapping (ie you have to know the archive date of the page at whitehats to
do that) but it works reasonably well, and adds one more click.

Obviously the Uncle Snort project will cure this somewhat, but in the 
meantime here's what I did:

1. In the acid directory that has all your php, find acid_signature.inc.
2. Edit the file and search on whitehats.
3. Change the URL in that line from
               $href = "<A HREF=\"http://www.whitehats.com/info/ids$ref_tag\"; ".

to

               $href = "<A HREF=\"http://web.archive.org/web/*http://www.whitehats.com/info/ids$ref_tag\"; ".

This works fairly well for us, albeit slow.

W

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users