[Snort-devel] Fwd: [Snort-users] host attribute table - feature request

Joel Esler joel.esler at ...3080...
Mon Mar 22 15:47:15 EDT 2010



Begin forwarded message:

> From: Joel Esler <joel.esler at ...3080...>
> Date: March 22, 2010 2:54:55 PM EDT
> To: "Crook, Parker" <Parker_Crook at ...3081...>
> Cc: snort-devel-request at lists.sourceforge.net, "snort-users at lists.sourceforge.net List" <snort-users at lists.sourceforge.net>
> Subject: Re: [Snort-users] host attribute table - feature request
> x-mailer: Apple Mail (2.1077)
> 
> Parker, 
> 
> I've cc'ed the snort-devel list.  I'm not aware if the developers are on the snort-users list.
> 
> J
> 
> On Mar 22, 2010, at 1:35 PM, Crook, Parker wrote:
> 
>> After speaking with Andy about getting hogger to create the host attribute table, he asked how he would know if Snort successfully slurped up the attribute file.  I did some checking on my installation and went through the logs and noticed there is not any sort of indication of whether or not Snort is using a host attribute table. 
>>  
>> Would it be possible to add this feature so that we can receive confirmation that we are or are not using the host attribute feature? (similar to the message on PCAP frames)
> 
> --
> Joel Esler
> http://blog.joelesler.net
> 
> 
> ------------------------------------------------------------------------------
> Download Intel® Parallel Studio Eval
> Try the new software tools for yourself. Speed compiling, find bugs
> proactively, and fine-tune applications for parallel performance.
> See why Intel Parallel Studio got high marks during beta.
> http://p.sf.net/sfu/intel-sw-dev_______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

--
Joel Esler
http://blog.joelesler.net


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20100322/8bfbdf78/attachment.html>


More information about the Snort-devel mailing list