[Snort-users] SID Assignment

Phil Daws uxbod at ...14273...
Wed Apr 3 14:47:54 EDT 2013


have started to work with Snort and find it amazing! What I would like to do now is integrate it with OSSEC and use the active responsive functionality to blocked IPs based on certain criteria; one of those criteria being the SID that triggered the event.  How often do assigned SIDs change as would hate to hate spew of FP's :)

Thank you.

More information about the Snort-users mailing list