[Snort-users] What am I Protecting Against?
Roy S. Rapoport
snort-users at ...9230...
Mon Jun 2 23:34:05 EDT 2003
On Tue, Jun 03, 2003 at 12:14:10AM -0600, james wrote:
> : And, more generally, is there a way to find out, essentially, what the
> : rule writer was thinking when they came up with the rule?
> The rule writer understands that snort is not about protection,
> but providing info so a clueful user can then take action to protect.
> Clueful users know you cannot run all the rules & that it is expected
> and required that one tune the rule set to their networks.
Interestingly, I'm getting a mixture of somewhat-conflicting answers to
my question -- all of which are, I think, right.
> I do not see how Snort, run by itself, provides "protection".
Never said it did.
More information about the Snort-users