[Snort-users] Seen this?

Steve Hutchins Steve.Hutchins at ...277...
Thu Mar 15 15:10:32 EST 2001


Do you reckon they put some code like this in RS :

if (RuleTriggered) {

Can we have the same for snort and then make a public statement

They must be doing threshold analysis of some sort, 
whether in the sensor or console.
Any ideas what can be done with snort, or is the thinking that it is
not a sensor issue, but an issue for the reporting tool to deal with?

:) Steve (:

More information about the Snort-users mailing list