Snort mailing list archives
Sec configuration file
From: "Sebastien Desse" <sebastien.desse () libertysurf fr>
Date: Thu, 20 Nov 2003 00:46:02 +0100
We talked about SEC event correlation tool. Can anybody provide a sample SEC configuration file for snort FAST or FULL alerting message analysis. I'm a very poor coder an I cannot write the good Rexexp. The SEC Website only provide a syslog message analysis. Unix Guru please help :-) Regards ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Sec configuration file Sebastien Desse (Nov 19)
- rules error with @!#$ snortcenter SWIT (Nov 19)