I use a fairly simple build of snort - no options - other than the defaults
(pcre, libpcap), and then for output write only alerts. BUT - that is not
used as a general IDS, it's looking for some very specific things -
generally only using the Bleeding Snort malware and virus rules.
But, as Patrick pointed out, it would help if you explained why/what/etc.
Bob
-----Original Message-----
From: snort-users-admin@lists.sourceforge.net
[mailto:snort-users-admin@lists.sourceforge.net] On Behalf Of Harper,
Patrick
Sent: Wednesday, January 26, 2005 6:16 AM
To: tabrez rajani
Cc: snort-users@lists.sourceforge.net
Subject: RE: [Snort-users] Barebones version of Snort
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
It might help if you explain what you are wanting to do with it?
- -----Original Message-----
From: tabrez rajani [mailto:tabrez_rajani@yahoo.com]
Sent: Tuesday, January 25, 2005 3:42 PM
To: snort-devel@lists.sourceforge.net
Cc: snort-users@lists.sourceforge.net
Subject: [Snort-users] Barebones version of Snort
Hello Everybody,
I was wondering if anybody had the bare bones version of snort i.e., Snort
compressed to about 4-5 files with just the basic functionality.
I would really appreciate it if somebody could help me out with this.
Regards,
Tabrez
__________________________________
Do you Yahoo!?
Yahoo! Mail - Find what you need with new enhanced search.
http://info.mail.yahoo.com/mail_250
- -------------------------------------------------------
This SF.Net email is sponsored by: IntelliVIEW -- Interactive
Reporting
Tool for open source databases. Create drag-&-drop reports. Save time
by over 75%! Publish reports on the web. Export to DOC, XLS, RTF,
etc.
Download a FREE copy at http://www.intelliview.com/go/osdn_nl
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
-----BEGIN PGP SIGNATURE-----
Version: PGP 8.1
iQA/AwUBQfemJ5iWafDb7+B/EQJJiQCeMTPlefziUcxP3N3vWwqOnmur05AAoLXT
OMfx30eDoo/drltYfivwpO+n
=/Hov
-----END PGP SIGNATURE-----
Disclaimer:
This electronic message, including any attachments, is confidential and
intended solely for use of the intended recipient(s). This message may
contain information that is privileged or otherwise protected from
disclosure by applicable law. Any unauthorized disclosure, dissemination,
use or reproduction is strictly prohibited. If you have received this
message in error, please delete it and notify the sender immediately.
-------------------------------------------------------
This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
Tool for open source databases. Create drag-&-drop reports. Save time
by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
Download a FREE copy at http://www.intelliview.com/go/osdn_nl
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=ort-users
-------------------------------------------------------
This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
Tool for open source databases. Create drag-&-drop reports. Save time
by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
Download a FREE copy at http://www.intelliview.com/go/osdn_nl
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
