SnortSam - a few questions

[zottmann () ig com br]

Hi! 

We have successfully installed a great Snort solution here, comprising 
Snort, SnortCenter, Acid and SnortSam, and everything is working fine. 

I have two questions regardins SnortSam, though: 

1) Is there a list of "proven" attack rules, that we can use as a basis for 
configuring these rules to use SnortSam to block the attackers at the 
firewall? 

2) Although SnortSam is working fine, we don´t get the alerts on Acid 
regarding the rule that we have chosen for the SnortSam test. Do we have to 
duplicate the rules that we chose to run with SnortSam, or there is another 
way to get Acid alerts for these rules too? 

TIA, 
Carlos. 

_________________________________________________________
Voce quer um iGMail protegido contra vírus e spams? 
Clique aqui: http://www.igmailseguro.ig.com.br
Ofertas imperdíveis! Link: http://www.americanas.com.br/ig/



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users