[Snort-users] Odd packets... maybe a new Trojan?

Erich Meier Erich.Meier at ...99...
Thu Oct 26 05:01:23 EDT 2000


On Wed, Oct 25, 2000 at 09:50:56PM -0400, Martin Roesch wrote:
> I'd probably think about sending a combined report to intrusion at ...695... as
> well as incidents.  Hmm, maybe we should think about a Snort-detects list or
> something... :)

Why not use "incidents at ...35..." instead? It was created exactly for
that purpose and I am getting lots of analyzed incidents from there.

Erich



More information about the Snort-users mailing list