bruneau at ...126...
Mon Sep 4 12:26:36 EDT 2000
What I have been doing is running Snort and Shadow on the same box (home) and
it works quite good. I am planning to do the same in a production environment
(after running extensive tests).
Yasin Yilmaz wrote:
> I have been using shadow (sensor-analyzer hosts) for sometime. Now i would
> like use snort. What is the best configuration to use snort with shadow?
> I like the shadow's web based style and search options, directory
> Shall i capture packets with snort (or shadow) and pass them to the other on
> the analyzer machine etc... Who will keep the logs? which format is more
> Thank you
> yasin yilmaz
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
Ma page est a/My page at: http://www.penguinpowered.com/~bruneau
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-users