Snort mailing list archives

Snort-DNS lookup question


From: Clayton Mascarenhas <massnort () yahoo com>
Date: Wed, 18 Aug 2004 06:52:39 -0700 (PDT)

Hi

When I run Acid.. it takes a lot of time to show up..
I'm guessing its because of the excessive number of
alerts I am receiving. Inorder for me to improve the
speed ... in a little way...  is there any way in
snort where I can remove its capability of trying to
look up the DNS to try to resolve the ip addresses it
catches in the alert files. My thinking is that by
stopping this function in snort... Acid wont have that
"FQDN" column that always shows me Unable to resolve
address... thus improving the speed. Please could
someone correct me if I am wrong... or let me know how
to remove the DNS lookup in snort. 

Thanks

Clayton


                
__________________________________
Do you Yahoo!?
New and Improved Yahoo! Mail - Send 10MB messages!
http://promotions.yahoo.com/new_mail 


-------------------------------------------------------
SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift.
http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: