[Snort-users] How to get an answer to your question.
topping at ...7975...
Sat Jan 11 11:17:05 EST 2003
I found this to be really worth reading, even after years in the industry.
it's easy to forget all of the stuff that makes for an interesting question!!
> -----Original Message-----
> From: Erek Adams [mailto:erek at ...950...]
> Sent: Saturday, January 11, 2003 10:45 AM
> To: Pig-A-Holics Anonymous
> Subject: [Snort-users] How to get an answer to your question.
> Many times on this list (and other lists as well), I see people ask a
> question which generates _no_ responses. Then in a few days,
> you see a
> very terse email from the original poster with "Since I got
> no responses,
> I'm asking again...". Folks, it's not hard to get a
> response--It's hard
> to get a useful question!
> Here are a few pointers on "How to ask your question and get a useful
> response" for folks on this list (and others). Don't be
> scared to post!
> Just try to help _us_ help _you_!
> 1) What OS and version? Patches? Service Packs?
> 2) What version of Snort? Build number?
> 3) Built from tarball or a pre-packaged binary?
> 4) Where did you get the source or binary from? Main site? Mirror?
> 5) Don't crosspost.
> 6) Cut and paste error messages. Don't send the entire
> Snort startup
> output, just send the error message and the 10-15 lines above it.
> 7) Did you search the message archives  for your error
> message, or something similar?
> 8) Did you read README, INSTALL, and BUGS inside the tarballs /docs
> 9) Did you read the man page?
> 10) Did you read the Online users manual ?
> 11) Did you look at the _ENTIRE_ FAQ ?
> 12) Did you try Google?
> 13) Did you write an accurate description of the problem?
> "When starting
> Snort under a chroot jail, it fails upon opening of the rules file."
> 14) Do you realize no one is getting paid for this? Your
> boss might be
> yelling at you, but we're (snort-users folks) doing this out of the
> goodness of our hearts so don't yell at us.
> (For some more things 'not to do' have a look at the
> Snort-Users drinking
> game . It's not mandatory, but it does give you an idea
> of some of the
> 'not so good' things that are seen on the list.)
> Above all: Check the docs, archives and FAQ first. You
> might be able to
> answer your own question right then! No waiting overnight or over the
> weekend... :)
> Erek Adams
> "When things get weird, the weird turn pro." H.S. Thompson
>  http://marc.theaimsgroup.com/?l=snort-users&r=1&w=2
>  http://www.snort.org/docs/writing_rules/
>  http://www.snort.org/docs/faq.html and in /docs (from the
> source tarball)
>  http://www.theadamsfamily.net/~erek/snort/drinking_game.txt
> This SF.NET email is sponsored by:
> SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> Snort-users list archive:
More information about the Snort-users