Snort mailing list archives

Re: Reliability of signatures


From: Nigel Houghton <nhoughton () sourcefire com>
Date: Fri, 4 Feb 2011 11:38:00 -0500

On Fri, 4 Feb 2011 11:23:38 -0500, Michael Scheidell wrote:
On 2/4/11 11:17 AM, Joel Esler wrote:
What I was thinking was having a reputation (hit) count score from 
gid:sid and maybe from the IP involved, then allow people to comment 
on said results manually.
good idea.  would give you ip reputation also.

We've been working on something, stay tuned :D

--
Nigel Houghton
Head Mentalist
SF VRT Department of Intelligence Excellence
http://vrt-blog.snort.org/ && http://labs.snort.org/

------------------------------------------------------------------------------
The modern datacenter depends on network connectivity to access resources
and provide services. The best practices for maximizing a physical server's
connectivity to a physical network are well understood - see how these
rules translate into the virtual world? 
http://p.sf.net/sfu/oracle-sfdevnlfb
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: