Re: snort as HIDS

[wkitty42 () windstream net]

On 07/06/2016 05:25 PM, Lamont, Brian A. wrote:
> Its “configured” to sniff the local interface with just a community.rules file
> defined.    I may have been misled that we are using it as a “HIDs”, but perhaps
> it’s not really doing that.   The initial evaluation and decision to implement
> was done by another team.

sounds like they were only interested in checking the PCI box ;)

-- 
  NOTE: No off-list assistance is given without prior approval.
        *Please keep mailing list traffic on the list* unless
        private contact is specifically requested and granted.

------------------------------------------------------------------------------
Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San
Francisco, CA to explore cutting-edge tech and listen to tech luminaries
present their vision of the future. This family event has something for
everyone, including kids. Get more information and register today.
http://sdm.link/attshape
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!