[Snort-users] snort web interface
mikelococo at ...11827...
Wed Aug 24 10:46:06 EDT 2011
On 08/24/2011 09:44 AM, Joel Esler wrote:
> Let's leave the insults on the sidelines and highlight the good and
> bad of each interface, and perhaps, if there are shortfalls, let's
> point them out, hopefully the developers (BASE included, not just you
> Dustin) will take the shortfalls and add to their respective
Agreed. Calling someone an "idiot" or a "dick" is an ad hominem attack
and is inappropriate mailing list behavior that does nothing to further
the discussion. You can be honest about incorrect facts or misguided
advice without resorting to name calling.
Jason's response was extremely helpful but didn't address the question
of whether Snorby can clean old events out of the database, which is the
one actual technical criticism that has been made of Snorby in this
thread. Can it delete events, and if not is that feature on the
roadmap, or is there a recommended workaround? The schema is complex
enough that manually cleaning events in SQL is beyond most folks ability.
More information about the Snort-users