Snort mailing list archives

snort funtionallity


From: Nick Smith <nick () computernick com>
Date: Fri, 17 Dec 2004 01:35:08 -0500

isnt there a way to have snort email you when a serious attack occurs? i thought i remembered reading that some where but cant find it now. also is ACID the best console for snort? or are they any better ones out there? and are there any websites with a list of rules to add to increase security of your snort install without having to write all the rules by hand yourself? and where would i add those rules? and finally this probably goes along with the previous question; i am getting virtually no ICMP (<1%) traffic and no portscan traffic (0%), i know there has to be some traffic for those, and i have a fresh install of snort running, is there something i have to add to get snort to look for that traffic? thanks for any and all help, im very new to snort and acid and need all the help i can get

thanks

nick



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. http://productguide.itmanagersjournal.com/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: