Home page logo
/

snort logo Snort mailing list archives

Re: Using Snort in your business
From: Peter Bates <peter.bates () ucl ac uk>
Date: Tue, 28 May 2013 09:14:18 +0100

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Hello all

On 27/05/2013 20:34, Josh Bitto wrote:
My scope would be more directed at other schools. The thing and big debate that we're running into is the P2P stuff 
and file sharing.

We're using Snort very happily at the perimeter - mostly 
for identifying inbound attacks and malware C&C outbound.

We run a few P2P rules to log .torrent file accesses but we don't
limit the traffic in any way.

There are plenty of commercial P2P squashing/rate limiting solutions
out there if that's a concern - personally we just deal with the
copyright violations when they come in.

- -- 
Peter Bates
Senior Information Security Officer   Phone: +44(0)2076792049
Information Services Division         Internal Ext: 32049
University College London
London WC1E 6BT
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (MingW32)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJRpGdaAAoJELhVoVpEMS6RQOYH/jQYJ2fky+/BOmpUR3Ha/VDY
T8JoLBcTPldM2CCOMhdP7O7eTVptam2jMXO8Yjb52t5wflD03OuOC5M3Qce7LJ96
z4ct3bnWeJTe9eQpfc9FePE/9E8suMiL2lTcIBL5KF/JDTkthetGe19u2LsgozLT
dpJNHEacW62Itu0ukNWkB3w9WjhWmAVaiJ0hjGGojVQdr+3bxbAwxZzrqxK0/goI
IFgdWtVB1gsVS0O4SCiECY3yaxUS54lmS9Q2A2LzNSHbF9ivuBUAk1+LSwnNpBwt
kkJM4g9uwWoui59vn8bjTkog+cN4iXm/k6wUndDGLmLehEkWM4WD4yhAQnf8asI=
=D5CI
-----END PGP SIGNATURE-----


------------------------------------------------------------------------------
Try New Relic Now & We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service 
that delivers powerful full stack analytics. Optimize and monitor your
browser, app, & servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_may
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault