[Snort-users] Snort & ACID

permalink · #1 (**permalink**) 08-15-2005

This is a multi-part message in MIME format.

------=_NextPart_000_000A_01C5A1C6.33327AF0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit

Hi Guys/Girls

I have recently installed snort v2.3.3 and ACID v0.9.6b22 on RHEL3.

I am really impressed with the product (snort). Just a few questions:

Is there a complete list of all the Signature Database entries and
descriptions. I would like to go through them and build a parser to parse
the database and send me mail and text messages if certain events happen.

This way I can decide on what is important to me

I see that the ACID was last updated in 2003. Would you recommend me
changing to something else?

Thanks in advance.

Kind Regards,

Lean Cornelius

SINTREX Integration Services (PTY) Ltd
Tijgerpark 2
Second Floor
Willie van Schoor Avenue
Bellville
7530
South Africa

Tel: +27 (0) 21 914 6450
Fax: +27 (0) 21 914 9878
Mobile: +27 (0) 82 770 1604
Email: lean.cornelius@sintrex.com

The information transmitted is intended only for the person or entity to
which it is
addressed and may contain confidential and/or privileged material. If you
are not the intended
recipient of this message, please notify the sender thereof and destroy or
delete the message.
Any use of information contained by this message, by persons or entities
other than the intended
recipient is prohibited.

------=_NextPart_000_000A_01C5A1C6.33327AF0
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:st1=3D"urn:schemas-microsoft-com:office:smarttags" =
xmlns=3D"http://www.w3.org/TR/REC-html40">

<head>
<meta http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<meta name=3DGenerator content=3D"Microsoft Word 11 (filtered medium)">
<o:SmartTagType =
namespaceuri=3D"urn:schemas-microsoft-com:office:smarttags"
name=3D"City" =
downloadurl=3D"http://www.5iamas-microsoft-com:office:smarttags"/>
<o:SmartTagType =
namespaceuri=3D"urn:schemas-microsoft-com:office:smarttags"
name=3D"country-region"/>
<o:SmartTagType =
namespaceuri=3D"urn:schemas-microsoft-com:office:smarttags"
name=3D"place" downloadurl=3D"http://www.5iantlavalamp.com/"/>
<o:SmartTagType =
namespaceuri=3D"urn:schemas-microsoft-com:office:smarttags"
name=3D"Street"/>
<o:SmartTagType =
namespaceuri=3D"urn:schemas-microsoft-com:office:smarttags"
name=3D"address"/>

<style>

</style>

</head>

<body lang=3DEN-US link=3Dblue vlink=3Dpurple>

<div class=3DSection1>

Hi Guys/Girls<o:p></o:p>

<o:p> </o:p>

I have recently installed snort v2.3.3 and ACID =
v0.9.6b22 on
RHEL3.<o:p></o:p>

I am really impressed with the product (snort). Just =
a few
questions:<o:p></o:p>

<o:p> </o:p>

Is there a complete list of all the Signature =
Database
entries and descriptions. I would like to go through them and build a =
parser to
parse the database and send me mail and text messages if certain events =
happen.<o:p></o:p>

This way I can decide on what is important to =
me<o:p></o:p>

<o:p> </o:p>

I see that the ACID was last updated in 2003. Would =
you recommend
me changing to something else?<o:p></o:p>

<o:p> </o:p>

Thanks in advance.<o:p></o:p>

<o:p> </o:p>

Kind Regards,<o:p></o:p>

<o:p> </o:p>

Lean =
Cornelius <o:p></o:p>

<pre><o:p> </o:p></f=
ont></pre><pre>SINTREX Integration =
Services (PTY) Ltd<o:p></o:p></pre><pre>Tijgerpark =
2<o:p></o:p></pre><pre>Second =
Floor<o:p></o:p></pre><pre><st1:Street
w:st=3D"on"><st1:address w:st=3D"on">Willie van Schoor =
Avenue</st1:address></st1:Street><o:p></o:p></=
pre><pre>Bellville<o:p></o:p>=
</pre><pre>7530<o:p></o:p></fon=
t></pre><pre><st1:country-region
w:st=3D"on"><st1:place w:st=3D"on">South =
Africa</st1:place></st1:country-region><o:p></o:p></=
pre><pre> =
<o:p></o:p></pre><pre>Tel:   &nbsp=
;      +27 (0) 21 914 =
6450<o:p></o:p></pre><pre>Fax:   &nbsp=
;      +27 (0) 21 914 =
9878<o:p></o:p></pre><pre><st1:City
w:st=3D"on"><st1:place w:st=3D"on">Mobile</st1:p=
lace></st1:City>:    &n=
bsp; +27 (0) 82 770 1604<o:p></o:p></pre><pre>Email:   &nb=
sp;   <a =
href=3D"mailto:lean.cornelius@sintrex.com">lean.co rnelius@sintrex.com</a>=
<o:p></o:p></pre><pre> <o:p></o:p></pre><pre><fon=
t
size=3D2 face=3D"Courier New">The =
information transmitted is intended only for the person or entity to =
which it is <o:p></o:p></pre><pre>addressed =
and may contain confidential and/or privileged material. If you are not =
the intended<o:p></o:p></pre><pre>recipient =
of this message, please notify the sender thereof and destroy or delete =
the message.<o:p></o:p></pre><pre>Any use =
of information contained by this message, by persons or entities other =
than the intended<o:p></o:p></pre><pre>recipient =
is prohibited.<o:p></o:p></pre>

<o:p> </o:p>

</div>

</body>

</html>

------=_NextPart_000_000A_01C5A1C6.33327AF0--

-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode