[Snort-users] Hi

Matt Kettler mkettler at ...4108...
Tue Jun 14 12:26:29 EDT 2005


Joel Esler wrote:
> swatch, that's what i meant.. not spade (does spade do that?)
> 

Spade generate emails?

No..

SPADE (Statistical Probability Detection Engine) is a detection plugin for
snort. Think of it as bayes for portscans. It uses a statistics to detect if a
particular connection port/ip pairing is "outside the norm" based on past
observations.


It is not a management front end or output plugin. Thus, spade generates alerts,
but has nothing to do with where they go.





More information about the Snort-users mailing list