Best way of utilising SNORT rules?

From: SCOTT Jason, Network Engineer <jason.scott@phnt.swest.nhs.uk>
Date: 04/13/06
Message-ID: <C92E5E413F67304AB3921726BD40EA1D043276AD@PHNT66.derriford.phnt.swest.nhs.uk>

With Traffic Sentinel, what is the best way of utilising SNORT rules? Is it
possible to update TS with new rules as they come about? If so can you append
the rules or is it necessary to create a completely new rules file?

Regards,

Jason Scott
Received on Thu Apr 13 00:10:27 2006

This message: [ Message body ]
Next message: Peter Phaal: "RE: Best way of utilising SNORT rules?"
Previous message: Kevin Kawaguchi: "Foundry sflow idiosyncrasy"
Next in thread: Peter Phaal: "RE: Best way of utilising SNORT rules?"
Reply: Peter Phaal: "RE: Best way of utilising SNORT rules?"

Mail actions: [ respond to this message ] [ mail a new topic ]
Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ] [ By messages with attachments ]

This archive was generated by hypermail 2.1.8 : 04/13/06 PDT