RE: Hogwash..

[Ju Kong Fui <kongfui () TP EDU SG>]

I was using it, until we encounter DDOS that was not able to flood our high
bandwidth link but it did successfully paralysed the Hogwash box (a Pentium
III 933 box with 512 MB SDRAM) because it had to generate tones of alerts
every second and made it unable to forward normal traffic.  

Other than that, I realise if the unicode preprocessor is enabled, the
performance will suffer, and sometimes stop forwarding packets totally.

Other that the two mentioned above, it is a great tool.

-----Original Message-----
From: Franki [mailto:frankieh () vianet net au] 
Sent: Monday, December 03, 2001 9:47 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Hogwash..


Hi all,

I just wanted to ask,

is anyone here using Hogwash (or has used it), and if so, what are your
opinions of it?

is it worth chasing up?




rgds

Frank


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users