[Snort-users] Hi

Joel Esler eslerj at ...11827...
Tue Jun 14 12:27:56 EDT 2005


Yeah. didn't think so. Thanks for the correction, i think i meant to type 
swatch...



On 6/14/05, Matt Kettler <mkettler at ...4108...> wrote:
> 
> Joel Esler wrote:
> > swatch, that's what i meant.. not spade (does spade do that?)
> >
> 
> Spade generate emails?
> 
> No..
> 
> SPADE (Statistical Probability Detection Engine) is a detection plugin for
> snort. Think of it as bayes for portscans. It uses a statistics to detect 
> if a
> particular connection port/ip pairing is "outside the norm" based on past
> observations.
> 
> 
> It is not a management front end or output plugin. Thus, spade generates 
> alerts,
> but has nothing to do with where they go.
> 
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20050614/56dc8dfc/attachment.html>


More information about the Snort-users mailing list