[Snort-users] learning snort

Patrick Walsh pwalsh at ...13543...
Thu Sep 29 08:14:36 EDT 2005

> -----Original Message-----
> From: snort-users-admin at lists.sourceforge.net
> [mailto:snort-users-admin at lists.sourceforge.net] On Behalf Of James B
> Horwath
> Sent: Wednesday, September 28, 2005 3:46 PM
> To: snort-users at lists.sourceforge.net
> Subject: [Snort-users] learning snort
> I am in the process of studying for the GCIA second exam which covers snort
> setup and use.  I have been reading the mailing list, snort documentation
> and playing with a small controlled snort setup. Although RTFM is great, I
> learn better by actually doing hands on things.  I am using a packet
> crafting tool like hping2 to watch and learn how snort works.  I have been
> reading about tools like snot which use the snort configuration and build
> packets based on the configuration.  This seems like an ideal way to learn

	I think you're thinking of sneeze.  It didn't work for me when I tried
it, but I didn't dig very deep into it.  It used to be in the contribs
section of the snort.org site, but I don't see it there anymore, so
perhaps it has been retired.  A google search for "snort sneeze" found
the perl script though.

Patrick Walsh
eSoft Incorporated
303.444.1600 x3350
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20050929/0db51854/attachment.sig>

More information about the Snort-users mailing list