Home page logo
/

snort logo Snort mailing list archives

Some general questions
From: tarik shalo <tarikshalo () gmail com>
Date: Thu, 16 May 2013 17:38:34 +0300

Hi guys,

Two things to ask:
1.Is there some estimate how many rules are in recent Snort versions?
Including preprocessor rules?
I expect that the numbers are big. In that case, are there some tips on how
to optimize and tune Snort?
2.How can Snort determines whether a particular session is legitimate one
or not? Or Is it the task of a particular preprocessor?

-Thanks for the help
------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

  By Date           By Thread  

Current thread:
  • Some general questions tarik shalo (May 16)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault