Snort mailing list archives

Re: question about snort anomaly detection


From: Russ Combs <rcombs () sourcefire com>
Date: Mon, 14 Oct 2013 10:37:30 -0400

Please redirect to the snort-users list.  I think you will find the answers
there.

Thanks
Russ


On Sun, Oct 13, 2013 at 5:57 AM, mohammad mahdizadeh <m4_mail () yahoo com>wrote:

Hi all.
In Snort offical site, writed that Snort is a signature & anomaly
detection IDS.
But i can't find any details about anomaly detection in orginal Snort.
Where can i find any information about anomaly detection methods used in
Snort ?



------------------------------------------------------------------------------
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most
from
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60134071&iu=/4140/ostg.clktrk
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!

------------------------------------------------------------------------------
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60134071&iu=/4140/ostg.clktrk
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!

Current thread: