RE: [Snort-users] SNort signature based filtering
This is a discussion on RE: [Snort-users] SNort signature based filtering within the Snort forums, part of the System Security and Security Related category; This is a multi-part message in MIME format. ------_=_NextPart_001_01C62B1E.AE83E310 Content-Type: text/plain; charset="US-ASCII&...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
02-06-2006
|
|||
|
|||
RE: [Snort-users] SNort signature based filtering
This is a multi-part message in MIME format.
------_=_NextPart_001_01C62B1E.AE83E310 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable =20 -----Original Message----- From: snort-users-admin@lists.sourceforge.net [mailto:snort-users-admin@lists.sourceforge.net] On Behalf Of mac subbu Sent: Monday, February 06, 2006 1:30 AM To: snort-users@lists.sourceforge.net Subject: [Snort-users] SNort signature based filtering =09 =09 Hi, Is it possible to filter out SID from a particular source in snort ???=20 And if possible how can we achieve that =20 Thanks and regards=20 =20 FAQ: search for threshold.conf =20 ------_=_NextPart_001_01C62B1E.AE83E310 Content-Type: text/html; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD><TITLE>Message</TITLE> <META http-equiv=3DContent-Type content=3D"text/html; = charset=3Dus-ascii"> <META content=3D"MSHTML 6.00.2900.2802" name=3DGENERATOR></HEAD> <BODY> <DIV><FONT face=3DArial color=3D#0000ff size=3D2></FONT> </DIV> <BLOCKQUOTE dir=3Dltr=20 style=3D"PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px = solid; MARGIN-RIGHT: 0px"> <DIV></DIV> <DIV class=3DOutlookMessageHeader lang=3Den-us dir=3Dltr = align=3Dleft><FONT=20 face=3DTahoma size=3D2>-----Original Message-----<BR><B>From:</B>=20 snort-users-admin@lists.sourceforge.net=20 [mailto:snort-users-admin@lists.sourceforge.net] <B>On Behalf Of = </B>mac=20 subbu<BR><B>Sent:</B> Monday, February 06, 2006 1:30 AM<BR><B>To:</B>=20 snort-users@lists.sourceforge.net<BR><B>Subject:</B> [Snort-users] = SNort=20 signature based filtering<BR><BR></FONT></DIV> <DIV>Hi,</DIV> <DIV>Is it possible to filter out SID from a particular source in = snort ???=20 </DIV> <DIV>And if possible how can we achieve that</DIV> <DIV> </DIV> <DIV>Thanks and<SPAN class=3D203281013-06022006><FONT face=3DArial = color=3D#0000ff=20 size=3D2> </FONT></SPAN><SPAN = class=3D203281013-06022006> </SPAN>=20 regards<SPAN class=3D203281013-06022006><FONT face=3DArial = color=3D#0000ff=20 size=3D2> </FONT></SPAN></DIV> <DIV><SPAN class=3D203281013-06022006></SPAN> </DIV> <DIV><SPAN class=3D203281013-06022006><FONT face=3DArial = color=3D#0000ff size=3D2>FAQ:=20 search for threshold.conf</FONT></SPAN></DIV> <DIV><SPAN=20 class=3D203281013-06022006> </SPAN></DIV></BLOCKQUOTE></BODY></HTML>= =00 ------_=_NextPart_001_01C62B1E.AE83E310-- ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://sel.as-us.falkag.net/sel?cmd=...486&dat=121642 _______________________________________________ Snort-users mailing list Snort-users@lists.sourceforge.net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/...fo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.p...st=snort-users 
|
Linear Mode
