[Snort-users] snort web interface

Mike Lococo mikelococo at ...11827...
Wed Aug 24 10:46:06 EDT 2011


On 08/24/2011 09:44 AM, Joel Esler wrote:
> Let's leave the insults on the sidelines and highlight the good and
> bad of each interface, and perhaps, if there are shortfalls,  let's
> point them out, hopefully the developers (BASE included, not just you
> Dustin) will take the shortfalls and add to their respective
> projects.

Agreed.  Calling someone an "idiot" or a "dick" is an ad hominem attack 
and is inappropriate mailing list behavior that does nothing to further 
the discussion.  You can be honest about incorrect facts or misguided 
advice without resorting to name calling.

Jason's response was extremely helpful but didn't address the question 
of whether Snorby can clean old events out of the database, which is the 
one actual technical criticism that has been made of Snorby in this 
thread.  Can it delete events, and if not is that feature on the 
roadmap, or is there a recommended workaround?  The schema is complex 
enough that manually cleaning events in SQL is beyond most folks ability.

Cheers,
Mike Lococo




More information about the Snort-users mailing list