Snort mailing list archives

stupid question


From: "Chris" <vze2f6h6 () verizon net>
Date: Fri, 6 Jun 2003 09:19:04 -0400


Ok, I have Snort up and running with ACID and I love it.  Very powerful tool
and it really sheds light on what's really going on in your network.

Now my question.  I have beautiful view of people trying to attack our
network.  Is there anything that can be done about these people?  Will ISPs
do anything with no proof of an actual break in, just attempted break-ins?
Is there anyway that I can at least trace the IP to an E-mail address and
say "I'm watching you"?

I have the feeling that the answer is probably going to be "No. Without
break-ins, no one will do anything".

Please feel free to contact me off the list.

Thanks, 

Chris Romano




-------------------------------------------------------
This SF.net email is sponsored by:  Etnus, makers of TotalView, The best
thread debugger on the planet. Designed with thread debugging features
you've never dreamed of, try TotalView 6 free at www.etnus.com.
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: