[Snort-users] Re: IDS Signature Catalog

Peter Bates peter.bates at ...79...
Wed Jul 19 14:10:16 EDT 2000


Hello there...

There are people out here,
I just suspect some of us might be a bit busy
now and again...

>Has anyone taken up the case of cataloging these snort
>signature database along with explanations and severity?

>It would be handy if an operations person sees a snort
>alert and wonders what it means.


I think the last mention of this
was that Max Vision has provided
the arachnids database and that
is generally sufficient (seeing as it
is what the vision.conf is based upon)

A search for (presently)

http://dev.whitehats.com/IDS/x

where X is the IDS number reported
by Snort would probably be sufficient...


Perhaps putting this information
into some local form might, however,
be a project worth pursuing... ???





-- 
---------------------------------------------------------------->
Peter Bates, Systems Support Officer, Network Support Team.
London School of Hygiene & Tropical Medicine.
Telephone:0207-927 2124 / Fax:0207-436 5389 / Pager: 07625 255362




More information about the Snort-users mailing list