[Snort-users] view alerts in base

Seth Art sethsec at ...11827...
Wed Apr 22 16:30:26 EDT 2009


Very nice additions..

I have two more suggestions:

--Drink X if Joel suggests that someone upgrade to the latest version or snort

--Drink X if someone asks why they are not seeing alerts for traffic
they are generating on the snort sensor itself and somone at ...14572...
suggests they use -k none to fix it.

-Seth

On Wed, Apr 22, 2009 at 3:59 PM, Joel Esler <jesler at ...1935...> wrote:
> I just put it up last week.  The Drinking Game was Erek Adams' joke.  But he
> passed away awhile back, and his server has been gone for awhile, so I found
> it, updated it with the help of Leon, and put it up on the internetz.
> J
>
> On Wed, Apr 22, 2009 at 3:34 PM, Randal T. Rioux <randy at ...13561...>
> wrote:
>>
>> On Wed, April 22, 2009 8:32 am, Leon Ward wrote:
>> > On Wed, Apr 22, 2009 at 12:52 PM, Joel Esler <jesler at ...1935...>
>> > wrote:
>> >
>> >> You should be using BASE.  ACID is dead.  Been dead for at least 5
>> >> years.
>> >> J
>> >>
>> >
>> > Joel, take a drink mate :)
>> > http://www.joelesler.net/finshake/The_Snort_Drinking_Game.html
>>
>> Ha, I hadn't seen that before. Thanks for the link!
>>
>> Randy
>>
>> PS Has it been too long since our last OS Holy War?
>>
>>
>>
>>
>> ------------------------------------------------------------------------------
>> Stay on top of everything new and different, both inside and
>> around Java (TM) technology - register by April 22, and save
>> $200 on the JavaOne (SM) conference, June 2-5, 2009, San Francisco.
>> 300 plus technical and hands-on sessions. Register today.
>> Use priority code J9JMT32. http://p.sf.net/sfu/p
>> _______________________________________________
>> Snort-users mailing list
>> Snort-users at lists.sourceforge.net
>> Go to this URL to change user options or unsubscribe:
>> https://lists.sourceforge.net/lists/listinfo/snort-users
>> Snort-users list archive:
>> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
>
>
> --
> joel esler | Sourcefire | gtalk: jesler at ...1935... | 302-223-5974 |
> http://twitter.com/joelesler
>
> ------------------------------------------------------------------------------
> Stay on top of everything new and different, both inside and
> around Java (TM) technology - register by April 22, and save
> $200 on the JavaOne (SM) conference, June 2-5, 2009, San Francisco.
> 300 plus technical and hands-on sessions. Register today.
> Use priority code J9JMT32. http://p.sf.net/sfu/p
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>




More information about the Snort-users mailing list