RE: Tell snort to resolve ip or use /etc/hosts?

[SRH-Lists <giermo () 333tech com>]

> Hey all!
>
> Since I'm blithering on in here I might as well get
> all my questions out now ;)  Any way to get snort to
> resolve ip addresses?  Looked around and googled but
> didn't find much on it.  Thanks!
>
> James

That would kinda tip off the attack that you had something or other
watching them and would also give them the IP of your snort box (if they
can see the traffic to their DNS)

(Along with the overhead concerns that someone else mentioned)

-steve


-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users