Re: help!

["李 洪源" <lhy0033 () hotmail com>]

> From: Erek Adams <erek () theadamsfamily net>
> To: 李 洪源 <lhy0033 () hotmail com>
> CC: Snort-users () lists sourceforge net
> Subject: Re: [Snort-users] help!
> Date: Thu, 18 Apr 2002 14:40:48 -0700 (PDT)
>
> On Thu, 18 Apr 2002, [gb2312] 李 洪源 wrote:
>
> > I tried to use snort,but I found the classtype of snort is not clear.To
> > each classtype,the description is too simlpe. Can you send me the 
completed
> > information about it? I am anxcious for it! Wating for your letter 
back!
> > Thanks a lot!
>
>
> The point is you should define those as you see fit and/or need to.  They 
are
> meant to be general, and not 'really well defined'.  They simply describe 
the
> alert at a 'high level' to help group the alerts.  It's up to the analyst 
to
> examine the traffic and make a better/more complete assesment.
>
> Cheers!
>
> -----
> Erek Adams
> Nifty-Type-Guy
> TheAdamsFamily.Net

Thank for your attention!But I really need the completed documents about 
the classtype of snort.I hope you can help me!Just as "attempted-admin", 
description is "Attempted Administrator Privilege Gain",I need more 
information.Thanks again!!



_________________________________________________________________
免费下载 MSN Explorer：http://explorer.msn.com/lccn/intl.asp


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users