[Snort-users] This has real potential

Alex Tatistcheff alex.tatistcheff at ...11827...
Fri Feb 26 15:36:58 EST 2010


There's a new Perl script on the block and it has HUGE potential to help
Snort admins tune their installations.  You're probably aware of the host
attribute table feature where you create an .XML file describing the hosts
on your network, then feed that into Snort.  The key phrase here is "you
create".  In the past this was a very labor intensive process and could
prove daunting if you have a large or fairly dynamic network.  Just recently
Parker Crook (one sharp individual) has written a script to create this host
attribute .XML file from output obtained from the nmap scanner.  The script
is new and could use some testing from the community.  However, the concept
is sound and the value of automatically creating this file is significant.
It's mentioned in a blog at

http://global-security.blogspot.com/2010/02/hogging-snort-host-attribute-table.html

The project, which is called Hogger (what a cool name) is available on
Google Code at http://code.google.com/p/hogger

Alex Tatistcheff
alext at ...492...
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20100226/c7873474/attachment.html>


More information about the Snort-users mailing list