Bluehost.com Web Hosting $6.95

[Snort-users] Config Filter: Bleeding Edge

This is a discussion on [Snort-users] Config Filter: Bleeding Edge within the Snort forums, part of the System Security and Security Related category; Is there a way to use this directive in the barnyard.conf to filter out anything with SID > 2000000 (...


Go Back   Usenet Forums > System Security and Security Related > Snort

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 12-21-2004
Wes Young
 
Posts: n/a
Default [Snort-users] Config Filter: Bleeding Edge

Is there a way to use this directive in the barnyard.conf to filter out
anything with SID > 2000000 (aka, all bleeding edge rules).

I'd like to run a seperate barnyard process that only processes "stable"
alerts to a database and one that shows me everything (including
bleeding edge).... I don't want my bosses flipping out every time they
see a false positive in bleeding edge....


TIA

--
Wes Young
Network Security Analyst
University at Buffalo
(716) 645 - 6109




-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://productguide.itmanagersjournal.com/
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users
Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On




All times are GMT +1. The time now is 05:04 AM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0