Re: snort on OSSIM

[Kaushal Shriyan <kaushalshriyan () gmail com>]

On Wed, Mar 17, 2010 at 6:50 PM, Crook, Parker <Parker_Crook () reyrey com> wrote:
> Kaushal,
>
> I honestly don't think you can configure Snort via the OSSIM web interface -- since there are only a number of 
> settings that are passed from the OSSIM configs to the snort.debian.conf file it would stand to reason that OSSIM 
> itself is not reading the snort.conf file to pass it up to the webpage (since OSSIM never touches the file, but 
> instead evokes the settings in the snort.debian.conf as command-line options).
>
> Pretty much the only thing you can configure in the web interface for Snort is the priority and reliability of the 
> rules.
>
> -Parker

Hi Parker,

Thanks for the quick reply.

where do i configure in the web interface for Snort the priority and
reliability of the rules ? I checked under Configuration > Collection.

Could not locate it. I am using OSSIM 2.2

Please guide.

Thanks and Regards,

Kaushal

------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users