Snort mailing list archives

RE: CyberKit 2.2 Ping, its driven me Nuts..


From: "Michael Steele" <michaels () winsnort com>
Date: Mon, 29 Dec 2003 09:43:34 -0800

Job Security;

-----\
This way you will keep statistical information on virus activity, which can
be nice to show your boss :-)
-----/

:-)

Kindest regards, 

The WINSNORT.com Management Team
-- 
Pick up your FREE Windows or UNIX Snort installation guides       
mailto:support () winsnort com
Website: http://www.winsnort.com
Snort: Open Source Network IDS - http://www.snort.org


-----Original Message-----
From: snort-users-admin () lists sourceforge net [mailto:snort-users-
admin () lists sourceforge net] On Behalf Of Erwin Van de Velde
Sent: Monday, December 29, 2003 9:21 AM
To: snort-users () lists sourceforge net
Subject: Re: [Snort-users] CyberKit 2.2 Ping, its driven me Nuts..

Hi,

Commenting it out will make you bind for internal infections!!!
I don't think it is good to comment it out, just adapt it if you really
want
to get rid of the alerts. Otherwise: filtering afterwards on alerts
itself.
This way you will keep statistical information on virus activity, which
can
be nice to show your boss :-)
It's also a good thing to keep an eye on general internet activity and
commenting all those nasty alerts out isn't the way to do that.

Greetings,
Erwin Van de Velde
Student of Antwerp University
Belgium



On Monday 29 December 2003 17:51, Bryan Irvine wrote:
I commented that rule out.

On Mon, 2003-12-29 at 10:51, Chris N wrote:
Fellow Snorters,

Ok, I have had enough of this "CyberKit 2.2 Ping." How are some of you
guys dealing with it? Do you just ignore(pass), log every one, or go
and
try to shut the offending hosts down? Although, trying to shutdown all
the offending host could be a daunting task, since there are so dam
many.

Chris



-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for
IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys
admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for
IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys
admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users





-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: