[Dshield] snort_18_syslog.pl

Johannes B. Ullrich jullrich at euclidian.com
Fri Nov 9 20:37:09 GMT 2001


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


The rule base should not be the problem. Someone else sent me a similar
report of problems with this client. Can you please send me a show extract 
from your messages log so I can try it here?

Thanks!

On Fri, 9 Nov 2001, Sue Young wrote:

> I'm trying the published snort client and having no luck.
> It doesn't catch anything in the messages log.  I was wondering
> whether the rulbase you use  matters.  I like Whitehats better
> than the snort rules.  Could that be the problem?  I could switch
> back to the snort rulebase.
> 
> Sue Young
> smyatgcmlpdotcom
> 
> _______________________________________________
> Dshield mailing list
> Dshield at dshield.org
> To change your subscription options (or unsubscribe), see: http://www1.dshield.org/mailman/listinfo/dshield
> 

- -- 
- -------
jullrich at sans.org                    Join http://www.DShield.org
                          Distributed Intrusion Detection System

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE77D52VOIizK5pIDMRAgJvAKDlGtkyZV/QJLbhGRvumzDyOcvlWgCfSOzz
tZ9dOySMKdhrfKmaYp0x8CA=
=YH5M
-----END PGP SIGNATURE-----




More information about the list mailing list