Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | RE: [Snort-users] Address on my network generating many alerts |
|---|---|
| Date: | Wed, 26 Apr 2006 15:04:07 -0400 |
Now that you have identified the good traffic, you can adjust the rules files, and add preprocessors for the valid traffic. There are a few good snort books that get into detail on the subject, and more specific questions can be answered here. I'd start with the online docs, and then move on to some of the better books. I like O'Reilly's 'Snort Cookbook. -E -----Original Message----- From: snort-users-admin@lists.sourceforge.net [mailto:snort-users-admin@lists.sourceforge.net] On Behalf Of Arthur DiSegna Sent: Wednesday, April 26, 2006 2:43 PM To: Snort Subject: [Snort-users] Address on my network generating many alerts Hello, I just installed SNORT for the first time and have noticed one of my servers generating a lot of traffic. Most of it is legitimate web traffic. How can I exclude the normal traffic while maintaining intrusion checks... Thanks AD ------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd_________________________________________ ______ Snort-users mailing list Snort-users@lists.sourceforge.net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list
rtfm.jpg
Description: JPEG image
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | [Snort-users] Re: Address on my network generating many alerts, Nigel Houghton |
|---|---|
| Next by Date: | [Snort-users] RE: Address on my network generating many alerts, Arthur DiSegna |
| Previous by Thread: | [Snort-users] Re: Address on my network generating many alerts, Nigel Houghton |
| Next by Thread: | [Snort-users] RE: Address on my network generating many alerts, Arthur DiSegna |
| Indexes: | [Date] [Thread] [Top] [All Lists] |