[Snort-users] Re: FW: heya -

Glenn Mansfield Keeni glenn at ...128...
Mon Jun 10 17:08:07 EDT 2002

Hi Kevin,

Kevin Watkins wrote:

> Glenn -
> Just wondering if you got around to doing this - and if not, what OID 
> you planned on using
> so we can add it in locally.

    This has been done. I have sent the mail to the 
snort-developers list - should be there in the archives
any time now. I am copying the mail below. You can  

download the upgraded plugin from the URL in the mail. 

> Thanks in advance,
> Kevin.

-------- Original Message --------
Subject: [Snort-devel] Snort-Snmp Upgrade
Date: Fri, 07 Jun 2002 11:03:35 +0900
From: Glenn Mansfield Keeni <glenn at ...128...>
Organization: Cyber Solutions Inc.
To: Martin Roesch <roesch at ...1935...>,   "snort-devel at lists.sourceforge.net"	 
<snort-devel at lists.sourceforge.net>


Hi!  The  SnortSnmp upgrade is available at


The Patch to upgrade from the earlier snortSnmpPlugin-02-1.8.3.tar.gz
is available  at

The significant changes are
     Sid, Rev, Protocol  are added to the notification.

The Notifications are made "fixed format" by default. [ The variable
format was a major source of irritation as several trap receivers did
not interpret these correctly]. The more effecient "variable format" is
still available as an option.

Depending on the plugin-activation line option a packet print will be
generated. This enables correlation and tracking of packets/attacks
across networks.

Could you please update the archives with this upgrade.




Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

Snort-devel mailing list
Snort-devel at lists.sourceforge.net

>  -----Original Message-----
> From:   Jeremy A. Hewlett 
> Sent:   Monday, June 10, 2002 5:15 PM
> To:     Kevin Watkins
> Subject:        RE: heya -
> Glenn Mansfield Keeni <glenn at ...1097...>
> On Sat, Apr 06, 2002 at 08:17:12AM +0900, Glenn Mansfield Keeni wrote:
>  Hi,
>     Figured out the SID and REV fields. Will add those to the
>  trap.
>        -----Original Message-----
>       From:   Kevin Watkins 
>       Sent:   Monday, June 10, 2002 5:12 PM
>       To:     Jeremy A. Hewlett
>       Subject:        heya -
>       you still have the e-mail of that snort SNMP output plugin guy?

More information about the Snort-users mailing list