Database event sorting

["Estes, Matt: CPR / FCBS" <Matt.Estes () eis army mil>]

Just a warning to all those roll-your-own report writers out there.  In
writing perl html reports into snort/mysql data before I realized that
timestamp is not sufficient to sort on (cause time is only down to the
second).  Gotta use CID.

It's quite alarming when a local server appears to be sending out "ACK-RST"
packets and getting "SYN-ACK" in response.

Matt

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users