[Snort-users] Snort book

Darren Webb spyder007 at ...6436...
Fri Jun 24 06:23:45 EDT 2005


Andrew,

Try this one first.  It helped me a lot with tuning.

http://www.amazon.com/exec/obidos/ASIN/1931836043/qid=1119619027/sr=2-1/ref=
pd_bbs_b_2_1/102-9339996-0280143

This one is also pretty good.  More on the rules.

http://www.amazon.com/exec/obidos/ASIN/0596007914/qid=1119619027/sr=2-3/ref=
pd_bbs_b_2_3/102-9339996-0280143

Darren


-----Original Message-----
From: snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net] On Behalf Of Willy, Andrew
Sent: Thursday, June 23, 2005 9:45 AM
To: 'snort user'
Cc: snort-users at lists.sourceforge.net
Subject: RE: [Snort-users] Snort book

Good advice - it was helpful when I read it the first time and guided me
through getting Snort fired up.  I was looking more along the lines of
something that would help a beginner decipher what Snort has to say after
it's running.

Did find some materials when I revisited snort.org.  Should have went there
first!  Thank you.

Andrew

-----Original Message-----
From: snort user [mailto:snort.user at ...11827...]
Sent: Thursday, June 23, 2005 7:35 AM
To: Willy, Andrew
Cc: snort-users at lists.sourceforge.net
Subject: Re: [Snort-users] Snort book


Why dont you try the snort manual ?

 
> 
NOTICE OF CONFIDENTIALITY-The information in this email, including
attachments, may be confidential and/or privileged and may contain
confidential health information. This email is intended to be reviewed only
by the individual or organization named as addressee. If you have received
this email in error please notify Scottsdale Medical Imaging, an affiliate
of Southwest Diagnostic Imaging, LTD immediately - by return message to the
sender or to support at ...13018... - and destroy all copies of this message and
any attachments. Please note that any views or opinions presented in this
email are solely those of the author and do not necessarily represent those
of Scottsdale Medical Imaging. Confidential health information is protected
by state and federal law, including, but not limited to, the Health
Insurance Portability and Accountability Act of 1996 and related
regulations.


-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from
IBM. Find simple to follow Roadmaps, straightforward articles, informative
Webcasts and more! Get everything you need to get up to speed, fast.
http://ads.osdn.com/?ad_id=7477&alloc_id=16492&op=click
_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




More information about the Snort-users mailing list