Snort mailing list archives

Re: Snortsp 3.0 manual or info


From: Martin Spinassi <martins.listz () gmail com>
Date: Thu, 03 Jun 2010 12:47:16 -0300

On Thu, 2010-06-03 at 11:16 -0400, Joel Esler wrote:
On Jun 3, 2010, at 11:15 AM, Martin Spinassi wrote:

Joel,

Thanks for your response. I can offer myself as a tester/reporter if you
can send me some examples on how to configure it with inline option, or
some draft documentation if there exists any.


Best advice is to read the README.  That's pretty much the only documentation that exists.  There is a live CD that 
exists where a friend of mine named Doug Burks has configured SSP on a LiveCD for testing.  Not aware if it supports 
inline mode.

He calls it Security Onion:
http://securityonion.blogspot.com/



--
Joel Esler
302-223-5974
Jabber: jesler () sourcefire com


Thanks Joel. I'll take a look at it. I'm also reading a SANS paper
linked in that blog that seems to be interesting.

Cheers,

Martin


------------------------------------------------------------------------------
ThinkGeek and WIRED's GeekDad team up for the Ultimate 
GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the 
lucky parental unit.  See the prize list and enter to win: 
http://p.sf.net/sfu/thinkgeek-promo
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: