This is a discussion on [Snort-users] Snort-DNS lookup question within the Snort forums, part of the System Security and Security Related category; Hi When I run Acid.. it takes a lot of time to show up.. I'm guessing its because of ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
Hi
When I run Acid.. it takes a lot of time to show up.. I'm guessing its because of the excessive number of alerts I am receiving. Inorder for me to improve the speed ... in a little way... is there any way in snort where I can remove its capability of trying to look up the DNS to try to resolve the ip addresses it catches in the alert files. My thinking is that by stopping this function in snort... Acid wont have that "FQDN" column that always shows me Unable to resolve address... thus improving the speed. Please could someone correct me if I am wrong... or let me know how to remove the DNS lookup in snort. Thanks Clayton __________________________________ Do you Yahoo!? New and Improved Yahoo! Mail - Send 10MB messages! http://promotions.yahoo.com/new_mail ------------------------------------------------------- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 _______________________________________________ Snort-users mailing list Snort-users@lists.sourceforge.net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/...fo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.p...st=snort-users |