[Snort-users] Snort & ACID

Lean Cornelius lean.cornelius at ...7125...
Mon Aug 15 09:53:27 EDT 2005


Thanks for all the response.

I used ACID 2 years ago and made the mistake to use it again.
I am upgrading now to BASE now :) another late night for me :o)

Kind Regards
Lean

-----Original Message-----
From: snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net] On Behalf Of M. Shirk
Sent: Monday, August 15, 2005 6:31 PM
To: snort-users at lists.sourceforge.net
Subject: RE: [Snort-users] Snort & ACID

For sigs, as of 2.4.0, the signature descriptions come with the signature 
snapshot in the doc/signatures directories.

And everyone else is screaming at their computers, "PLEASE USE BASE INSTEAD 
OF ACID"
:-)

BASE is BASEd off of ACID.

Shirkdog
http://www.shirkdog.us



>From: "Lean Cornelius" <lean.cornelius at ...7125...>
>To: <snort-users at lists.sourceforge.net>
>Subject: [Snort-users] Snort & ACID
>Date: Mon, 15 Aug 2005 18:21:48 +0200
>
>Hi Guys/Girls
>
>
>
>I have recently installed snort v2.3.3 and ACID v0.9.6b22 on RHEL3.
>
>I am really impressed with the product (snort). Just a few questions:
>
>
>
>Is there a complete list of all the Signature Database entries and
>descriptions. I would like to go through them and build a parser to parse
>the database and send me mail and text messages if certain events happen.
>
>This way I can decide on what is important to me
>
>
>
>I see that the ACID was last updated in 2003. Would you recommend me
>changing to something else?
>
>
>
>Thanks in advance.
>
>
>
>Kind Regards,
>
>
>
>Lean Cornelius
>
>
>SINTREX Integration Services (PTY) Ltd
>Tijgerpark 2
>Second Floor
>Willie van Schoor Avenue
>Bellville
>7530
>South Africa
>
>Tel:          +27 (0) 21 914 6450
>Fax:          +27 (0) 21 914 9878
>Mobile:      +27 (0) 82 770 1604
>Email:       lean.cornelius at ...7125...
>
>The information transmitted is intended only for the person or entity to
>which it is
>addressed and may contain confidential and/or privileged material. If you
>are not the intended
>recipient of this message, please notify the sender thereof and destroy or
>delete the message.
>Any use of information contained by this message, by persons or entities
>other than the intended
>recipient is prohibited.
>
>
>

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today - it's FREE! 
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/



-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users





More information about the Snort-users mailing list