Home page logo
/

snort logo Snort mailing list archives

Re: Help with a rule
From: "lists () packetmail net" <lists () packetmail net>
Date: Tue, 10 Dec 2013 12:09:01 -0600

On 12/10/2013 11:20 AM, Tyler MacPherson wrote:
Any suggestions?

I wouldn't use Snort for this, I'd use another method -- perhaps daemonlogger
flow analysis, libnids, netflow, lib-pcap based session tracking, etc.  Snort
isn't the right tool here.

Cheers,
Nathan

------------------------------------------------------------------------------
Rapidly troubleshoot problems before they affect your business. Most IT 
organizations don't have a clear picture of how application performance 
affects their revenue. With AppDynamics, you get 100% visibility into your 
Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro!
http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault