Snort mailing list archives

Re: No alert_smb in 2.1.0?

From: Frank Knobbe <frank () knobbe us>
Date: Fri, 19 Dec 2003 21:38:29 -0600

On Fri, 2003-12-19 at 13:39, Matt Kettler wrote:

         * configure.in:
           - removed smb alerting since it should be moved to barnyard



That's ridiculous. SMB alerts (like SNMP alerts) are a single UDP
packet. Database stuff taxes the system much more. Will spo_database be
removed in favor of Barnyard as well? Perhaps we should remove all
non-filesystem plugins..... geesh....

Regards,
Frank (feeling grumpy tonight ;)

Attachment: signature.asc
Description: This is a digitally signed message part

Current thread:

No alert_smb in 2.1.0? Mike Maki (Dec 19)
- Re: No alert_smb in 2.1.0? Matt Kettler (Dec 19)
  - Re: No alert_smb in 2.1.0? Frank Knobbe (Dec 20)
    - Re: No alert_smb in 2.1.0? Brian (Dec 20)
    - question about spp stream4 retransmission Michel Christophe (Dec 20)
    - Re: No alert_smb in 2.1.0? Frank Knobbe (Dec 20)