Re: Tell snort to resolve ip or use /etc/hosts?

[Matt Kettler <mkettler () evi-inc com>]

At 02:29 PM 1/14/2004, James Nonya wrote:
> Since I'm blithering on in here I might as well get
> all my questions out now ;)  Any way to get snort to
> resolve ip addresses?  Looked around and googled but
> didn't find much on it.  Thanks!

It'd be too slow for snort to do it when logging things... you'd wind up 
dropping packets while snort was waiting for DNS queries, etc.

If you really need things looked up, do it in a back-end script..



-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users