[Snort-users] Re: FW: heya -

Glenn Mansfield Keeni glenn at ...128...
Mon Jun 10 17:08:07 EDT 2002


Hi Kevin,


Kevin Watkins wrote:

> Glenn -
> 
> Just wondering if you got around to doing this - and if not, what OID 
> you planned on using
> so we can add it in locally.
> 

    This has been done. I have sent the mail to the 
snort-developers list - should be there in the archives
any time now. I am copying the mail below. You can  

download the upgraded plugin from the URL in the mail. 

> Thanks in advance,
> 
> Kevin.
> 
    Glenn




-------- Original Message --------
Subject: [Snort-devel] Snort-Snmp Upgrade
Date: Fri, 07 Jun 2002 11:03:35 +0900
From: Glenn Mansfield Keeni <glenn at ...128...>
Organization: Cyber Solutions Inc.
To: Martin Roesch <roesch at ...1935...>,   "snort-devel at lists.sourceforge.net"	 
<snort-devel at lists.sourceforge.net>

Marty,

Hi!  The  SnortSnmp upgrade is available at

   http://www.cysol.co.jp/contrib/snortsnmp/snortSnmpPlugin-1.8.6.tar.gz

The Patch to upgrade from the earlier snortSnmpPlugin-02-1.8.3.tar.gz
is available  at
   http://www.cysol.co.jp/contrib/snortsnmp/SnortSnmpPatch-03.gz


The significant changes are
     Sid, Rev, Protocol  are added to the notification.

The Notifications are made "fixed format" by default. [ The variable
format was a major source of irritation as several trap receivers did
not interpret these correctly]. The more effecient "variable format" is
still available as an option.

Depending on the plugin-activation line option a packet print will be
generated. This enables correlation and tracking of packets/attacks
across networks.

Could you please update the archives with this upgrade.

Thanks

Glenn




_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

_______________________________________________
Snort-devel mailing list
Snort-devel at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-devel




> 
>  -----Original Message-----
> From:   Jeremy A. Hewlett 
> Sent:   Monday, June 10, 2002 5:15 PM
> To:     Kevin Watkins
> Subject:        RE: heya -
> 
> Glenn Mansfield Keeni <glenn at ...1097...>
> 
> On Sat, Apr 06, 2002 at 08:17:12AM +0900, Glenn Mansfield Keeni wrote:
>  Hi,
>     Figured out the SID and REV fields. Will add those to the
>  trap.
> 
> 
>        -----Original Message-----
>       From:   Kevin Watkins 
>       Sent:   Monday, June 10, 2002 5:12 PM
>       To:     Jeremy A. Hewlett
>       Subject:        heya -
> 
>       you still have the e-mail of that snort SNMP output plugin guy?
> 







More information about the Snort-users mailing list