[Snort-users] ACID inputting from alerts?

Scott A. McIntyre scott at ...1050...
Wed May 9 12:34:05 EDT 2001


I'm sure this is possible, I just haven't seen it in the FAQ's yet --
how can I populate my ACID databases with the Full format alert file?

Or can one?  I realize you lose packet payloads, but the rest of it
should still be possible...

Thanks,
Scott





More information about the Snort-users mailing list