[Snort-users] RE: WhiteHats Mirror

Jeff Dell jdell at ...1095...
Fri Mar 1 06:32:17 EST 2002


You need to point to the name www.activeworx.com not the ip, damn VH.
Anyway, I don't know what you are using to lookup the alerts, but just
change the reference for arachnids from www.whitehats.com/info to
www.activeworx.com/info. If you want to change it within snort all
together, just change the following line in sp_reference.h

#define ARACHNIDS_URL_HEAD "http://www.whitehats.com/info/IDS"

to 

#define ARACHNIDS_URL_HEAD "http://www.activeworx.com/info/IDS"

Or where ever you have your database...

Jeff


> -----Original Message-----
> From: McCammon, Keith [mailto:Keith.McCammon at ...3497...] 
> Sent: Friday, March 01, 2002 9:17 AM
> To: Jeff Dell; g.coochey at ...1985...; 
> snort-users at lists.sourceforge.net; focus-ids at ...35...
> Subject: RE: [Snort-users] RE: WhiteHats Mirror
> 
> 
> Anyone else having some trouble with this mapping?  This 
> address resolves to 64.239.37.13.  However, when I add this 
> mapping, I get phpwebhosting's cheesy control panel.  
> Apparently Apache is puking because this is obviously not a 
> valid VH, so it spits out the control panel instead.
> 
> Anyone have suggestions?  We'd probably be pushing it to ask 
> them to create a VH for whitehats.com that points to the 
> activeworx web root, huh!?!?
> 
> -----Original Message-----
> From: Jeff Dell [mailto:jdell at ...1095...]
> Sent: Friday, March 01, 2002 8:39 AM
> To: g.coochey at ...1985...; snort-users at lists.sourceforge.net;
> focus-ids at ...35...
> Subject: [Snort-users] RE: WhiteHats Mirror
> 
> 
> Done, You can now also get to it from: 
> http://www.activeworx.com/info/IDSxx etc...
> 
> Enjoy!
> 
> > 
> -----Original Message-----
> > From: g.coochey at ...1985... [mailto:g.coochey at ...1985...]
> > Sent: Friday, March 01, 2002 8:16 AM
> > To: jdell at ...1095...; snort-users at lists.sourceforge.net; 
> > focus-ids at ...35...
> > Subject: Re: WhiteHats Mirror
> > 
> > 
> > This is great...
> > 
> > Would it be possible to change the path to /info/IDSxxx etc...
> > 
> > That way I can enter an entry in a hosts file for
> www.whitehats.com pointing to your site so that the URLs work 
> nicely on my console?
> 
> What about it?
> 
> If you can't, why don't you tar and gzip your archive and 
> I'll put it on my site ;-)
> 
> > 
> > Since so many people have asked for it, and Anthony Buser 
> has been so
> > kind to provide it. I have posted a mirror of the ArachNIDS 
> database. 
> > When Whitehats.com goes back up. This will be removed. *NOTE* it is 
> > outdated. :) In the mean time.. Enjoy!
> > 
> > <a href="/bti/redirect.html?http://www.activeworx.com/arachnids/"
> > target="newLink">http://www.activeworx.com/arachnids/</a>
> > 
> > Jeff
> > 
> 
> 
> 
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe: 
> https://lists.sourceforge.net/lists/listinfo/s> nort-users
> 
> Snort-users list archive: 
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
> 





More information about the Snort-users mailing list