[Snort-users] What am I Protecting Against?

Roy S. Rapoport snort-users at ...9230...
Mon Jun 2 23:34:05 EDT 2003


On Tue, Jun 03, 2003 at 12:14:10AM -0600, james wrote:
> : And, more generally, is there a way to find out, essentially, what the
> : rule writer was thinking when they came up with the rule?
> 
> The rule writer understands that snort is not about protection, 
> but providing info so a clueful user can then take action to protect.
> Clueful users know you cannot run all the rules & that it is expected
> and required that one tune the rule set to their networks. 

Interestingly, I'm getting a mixture of somewhat-conflicting answers to
my question -- all of which are, I think, right.

> I do not see how Snort, run by itself, provides "protection".

Never said it did.

-roy




More information about the Snort-users mailing list