I am in the process of studying for the GCIA second exam which covers
snort setup and use. I have been reading the mailing list, snort
documentation and playing with a small controlled snort setup. Although
RTFM is great, I learn better by actually doing hands on things. I am
using a packet crafting tool like hping2 to watch and learn how snort
works. I have been reading about tools like snot which use the snort
configuration and build packets based on the configuration. This seems
like an ideal way to learn more about snort behavior. I am having trouble
finding snot, are there any other tools recommended to exercise snort and
learn the what, why's and how. I don't have access to any large network
to try a live implementation, so my small and humble lab is the best I
can do. Any recommendations I would really appreciate.
Regards,
Jim
-----------------------------------------
This message, and any attachments to it, may contain information that
is privileged, confidential, and exempt from disclosure under
applicable law. If the reader of this message is not the intended
recipient, you are notified that any use, dissemination, distribution,
copying, or communication of this message is strictly prohibited. If
you have received this message in error, please notify the sender
immediately by return e-mail and delete the message and any
attachments. Thank you.
-------------------------------------------------------
This SF.Net email is sponsored by:
Power Architecture Resource Center: Free content, downloads, discussions,
and more. http://solutions.newsforge.com/ibmarch.tmpl
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
