[Snort-users] Stick

Martin Roesch roesch at ...421...
Thu Mar 15 18:08:46 EST 2001


I think that something like this makes a great way to test the Snort
rule set for accuracy and QA the program at the same time.  Combine this
and an expect script and you could have a really nice little functional
test suite for all the Snort plugins...

     -Marty

Fyodor wrote:
> 
> On Thu, Mar 15, 2001 at 10:05:08PM +0000, Dr SuSE wrote:
> > According to the stick website (http://www.8thport.com/projects8.html), only
> > ISS has a copy of stick.
> >
> 
> All right, let's try to have our own copy of stick. :)
> http://snort.sourceforge.net/attack_scripts-0.1.tar.gz
> 
> These are a couple of perl script which attempt to simulate attack based on
> snort signature files. They very hacked quickly for some other puprose, but
> hoperfully some people will find them handy. If someone would like
> to take a hand over the development feel free to do so :) I am abit stumbled
> with some other things on the moment :)
> 
> -Fyodor
> 
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users

--
Martin Roesch
roesch at ...421...
http://www.snort.org




More information about the Snort-users mailing list