[Snort-users] Secure - NSLOOKUP

Jason Haar Jason.Haar at ...294...
Sun Jan 28 16:03:26 EST 2001


I'm also in complete agreement that it is TOTALLY not snort's job to do DNS
lookups on addresses. I mean, who runs Apache with HostNameLookup turned on?
[if yes - you're site must be pretty low-volume]

This "problem" needs the same solution as Apache uses - namely build the DNS
lookups into the analysis tools - not the actual processor itself. 

-- 
Cheers

Jason Haar

Unix/Special Projects, Trimble NZ
Phone: +64 3 9635 377 Fax: +64 3 9635 417




More information about the Snort-users mailing list