[Snort-users] Smb output

Michael Sconzo msconzo at ...5072...
Wed Jul 21 07:55:06 EDT 2004

On Wed, Jul 21, 2004 at 09:22:40AM +0300, Nerijus Krukauskas wrote:
>   Smb alerting would be soooo sloooow, that snort would start 
> dropping packets very soon and very fast.
> sekure wrote:
> >The changelog says only this:
> >
> >"2003-10-20  Chris Green  <cmg at ...1935...>
> >	* configure.in:
> >	  - removed smb alerting since it should be moved to barnyard
> >"
> >
> >Whether or not it was actually moved to barnyard, I don't know.

Yup, it's slow and I have no idea if it was moved to barnyard, but
I have something that does this... if anybody is interested just
shoot me an email.

The New Testament offers the basis for modern computer coding theory,
in the form of an affirmation of the binary number system.
        But let your communication be Yea, yea; nay, nay: for
        whatsoever is more than these cometh of evil.
                -- Matthew 5:37

More information about the Snort-users mailing list