Re: Snort

El lun, 27 de 09 de 2004 a las 23:09, Jeremy Gonzales escribiÃ:
> Hi,
>
> Does anyone have experience with snort reports? How do
> you deal with the loads of information? Is there a way
> to  generate reports that eliminate the false
> positives? Any help will be appreciated.
>
> Thanks,
>
> Jeremy.

I think the best way to treat with snort generated data it's
using the ACID console, but you can't generate good reports
with it. You can try snortreport that maybe suits you better.

-- 
Jose Maria Lopez Hernandez
Director Tecnico de bgSEC
jkerouac@bgsec.com
bgSEC Seguridad y Consultoria de Sistemas Informaticos
http://www.bgsec.com
ESPAÃA

The only people for me are the mad ones -- the ones who are mad to live,
mad to talk, mad to be saved, desirous of everything at the same time,
the ones who never yawn or say a commonplace thing, but burn, burn, burn
like fabulous yellow Roman candles.
                -- Jack Kerouac, "On the Road"


--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from CORE 
IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to 
learn more.
--------------------------------------------------------------------------