Re: FW: heya -

[Glenn Mansfield Keeni <glenn () cysols com>]

Hi Kevin,


Kevin Watkins wrote:

> Glenn -
>
> Just wondering if you got around to doing this - and if not, what OID 
> you planned on using
> so we can add it in locally.

   This has been done. I have sent the mail to the 
snort-developers list - should be there in the archives
any time now. I am copying the mail below. You can  

download the upgraded plugin from the URL in the mail. 

> Thanks in advance,
>
> Kevin.
   Glenn




-------- Original Message --------
Subject: [Snort-devel] Snort-Snmp Upgrade
Date: Fri, 07 Jun 2002 11:03:35 +0900
From: Glenn Mansfield Keeni <glenn () cysols com>
Organization: Cyber Solutions Inc.
To: Martin Roesch <roesch () sourcefire com>,   "snort-devel () lists sourceforge net"	 
<snort-devel () lists sourceforge net>

Marty,

Hi!  The  SnortSnmp upgrade is available at

  http://www.cysol.co.jp/contrib/snortsnmp/snortSnmpPlugin-1.8.6.tar.gz

The Patch to upgrade from the earlier snortSnmpPlugin-02-1.8.3.tar.gz
is available  at
  http://www.cysol.co.jp/contrib/snortsnmp/SnortSnmpPatch-03.gz


The significant changes are
    Sid, Rev, Protocol  are added to the notification.

The Notifications are made "fixed format" by default. [ The variable
format was a major source of irritation as several trap receivers did
not interpret these correctly]. The more effecient "variable format" is
still available as an option.

Depending on the plugin-activation line option a packet print will be
generated. This enables correlation and tracking of packets/attacks
across networks.

Could you please update the archives with this upgrade.

Thanks

Glenn




_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel




>  -----Original Message-----
> From:   Jeremy A. Hewlett 
> Sent:   Monday, June 10, 2002 5:15 PM
> To:     Kevin Watkins
> Subject:        RE: heya -
>
> Glenn Mansfield Keeni <glenn () cysol co jp>
>
> On Sat, Apr 06, 2002 at 08:17:12AM +0900, Glenn Mansfield Keeni wrote:
>  Hi,
>     Figured out the SID and REV fields. Will add those to the
>  trap.
>
>
>        -----Original Message-----
>       From:   Kevin Watkins 
>       Sent:   Monday, June 10, 2002 5:12 PM
>       To:     Jeremy A. Hewlett
>       Subject:        heya -
>
>       you still have the e-mail of that snort SNMP output plugin guy?




_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas - http://devcon.sprintpcs.com/adp/index.cfm?source=osdntextlink

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users