OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: RE: [snort] Back home....
From: Mullen, Patrick (Patrick.MullenGD-CS.COM)
Date: Mon Mar 06 2000 - 14:43:25 CST


> I've got some fun new stuff to talk about once I get caught
> up, such as
> output plugins and dynamic packet collection....

Does this include a feature to log all connections but
if no alert is generated the log is wiped, or just
"alert occurred so start logging"?

My favorite, from way back, is I alert on SMTP relaying
rejected messages, which of course doesn't tell you what
or who the relay was for.

~Patrick