Re: Errors starting Snort...

[Nigel Houghton <nigel () sourcefire com>]

On  0, "Bristol, Gary L." <gbristol () ou edu> allegedly wrote:
> That would be unless you want to see if you have internal machines
> attacking other internal machines. 

Now we're headed down the road of placement, DMZs, internal zones, advanced
use of variables, tuning the rulesets, etc......

Lets get it working first, then start thinking about more advanced usage.

+-----------------------------------------------------------------+
    Nigel Houghton      Research Engineer       Sourcefire Inc.
                  Vulnerability Research Team

 Cat: "Forget red - let's go all the way up to brown alert!"
 Kryten: "There's no such thing as a brown alert sir."
 Cat: "You won't be saying that in a minute!"


-------------------------------------------------------
This SF.Net email is sponsored by:
Sybase ASE Linux Express Edition - download now for FREE
LinuxWorld Reader's Choice Award Winner for best database on Linux.
http://ads.osdn.com/?ad_id=5588&alloc_id=12065&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users