Snort mailing list archives

RE: Question about snortsnarf


From: "Eric Joe" <sysop () tje1 com>
Date: Thu, 13 Feb 2003 14:19:58 -0500 (EST)

Paul,
Cant get any better answer than from the man that wrote it! Thanks for the
great proggy Jim.

Eric



On Thu, 2003-02-13 at 11:10, James Hoagland wrote:

That is correct, since SnortSnarf draws some correlation across the
all the alerts, it doesn't output anything until it has read
everything it.

Thanks, Jim.  I'll post in the right list from now on. :-)

--
Paul Schmehl (pauls () utdallas edu)
Adjunct Information Security Officer
The University of Texas at Dallas
http://www.utdallas.edu/~pauls/
AVIEN Founding Member


-- 
Eric Joe
Network Operations
Journey's End Internet/Computer Connection Inc




-------------------------------------------------------
This SF.NET email is sponsored by: FREE  SSL Guide from Thawte
are you planning your Web Server Security? Click here to get a FREE
Thawte SSL guide and find the answers to all your  SSL security issues.
http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: