[Snort-users] view alerts in base

Joel Esler jesler at ...1935...
Wed Apr 22 17:16:44 EDT 2009


Good ideas, you'd be wasted halfway through the first fortnight.

J

On Wednesday, April 22, 2009, Seth Art <sethsec at ...11827...> wrote:
> Very nice additions..
>
> I have two more suggestions:
>
> --Drink X if Joel suggests that someone upgrade to the latest version or snort
>
> --Drink X if someone asks why they are not seeing alerts for traffic
> they are generating on the snort sensor itself and somone at ...14572...
> suggests they use -k none to fix it.
>
> -Seth
>
> On Wed, Apr 22, 2009 at 3:59 PM, Joel Esler <jesler at ...1935...> wrote:
>> I just put it up last week.  The Drinking Game was Erek Adams' joke.  But he
>> passed away awhile back, and his server has been gone for awhile, so I found
>> it, updated it with the help of Leon, and put it up on the internetz.
>> J
>>
>> On Wed, Apr 22, 2009 at 3:34 PM, Randal T. Rioux <randy at ...13561...>
>> wrote:
>>>
>>> On Wed, April 22, 2009 8:32 am, Leon Ward wrote:
>>> > On Wed, Apr 22, 2009 at 12:52 PM, Joel Esler <jesler at ...1935...>
>>> > wrote:
>>> >
>>> >> You should be using BASE.  ACID is dead.  Been dead for at least 5
>>> >> years.
>>> >> J
>>> >>
>>> >
>>> > Joel, take a drink mate :)
>>> > http://www.joelesler.net/finshake/The_Snort_Drinking_Game.html
>>>
>>> Ha, I hadn't seen that before. Thanks for the link!
>>>
>>> Randy
>>>
>>> PS Has it been too long since our last OS Holy War?
>>>
>>>
>>>
>>>
>>> ------------------------------------------------------------------------------
>>> Stay on top of everything new and different, both inside and
>>> around Java (TM) technology - register by April 22, and save
>>> $200 on the JavaOne (SM) conference, June 2-5, 2009, San Francisco.
>>> 300 plus technical and hands-on sessions. Register today.
>>> Use priority code J9JMT32. http://p.sf.net/sfu/p
>>> _______________________________________________
>>> Snort-users mailing list
>>> Snort-users at lists.sourceforge.net
>>> Go to this URL to change user options or unsubscribe:
>>> https://lists.sourceforge.net/lists/listinfo/snort-users
>>> Snort-users list archive:
>>> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>>
>>
>>
>> --
>> joel esler | Sourcefire | gtalk: jesler at ...1935... | 302-223-5974 |
>> http://twitter.com/joelesler
>>
>> ------------------------------------------------------------------------------
>> Stay on top of everything new and different, both inside and
>> around Java (TM) technology - register by April 22, and save
>> $200 on the JavaOne (SM) conference, June 2-5, 2009, San Francisco.
>> 300 plus technical and hands-on sessions. Register today.
>> Use priority code J9JMT32. http://p.sf.net/sfu/p
>> _______________________________________________
>> Snort-users mailing list
>> Snort-users at lists.sourceforge.net
>> Go to this URL to change user options or unsubscribe:
>> https://lists.sourceforge.net/lists/listinfo/snort-users
>> Snort-users list archive:
>> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>>
>

-- 
joel esler | Sourcefire | gtalk: jesler at ...1935... | 302-223-5974
| http://twitter.com/joelesler




More information about the Snort-users mailing list