|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Subject: Re: [snort] new snort_sort.pl release
From: Stuart Staniford-Chen (stuart
SiliconDefense.com)Date: Mon Mar 20 2000 - 04:32:52 CST
- Next message: Adam Olson: "Re: [snort] Binding snort to multiple interfaces"
- Previous message: Max Vision: "Re: [snort] A way to improve the signatures."
- In reply to: Andrew R. Baker: "Re: [snort] new snort_sort.pl release"
- Reply: Stuart Staniford-Chen: "Re: [snort] new snort_sort.pl release"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Uuuh
Try:
http://www.dpo.uab.edu/~andrewb/snort/snort_sort.html
At least this one works for me :-)
Stuart.
"Andrew R. Baker" wrote:
>
> make that http://www.dpo.uab.edu/~andrewb/snort/snort_stat.html
>
> -Andrew
>
> On Fri, 17 Mar 2000, Andrew R. Baker wrote:
> >
> > Here is the newest version of snort_sort.pl. I have also created a web
> > page at http://www.dpo.uab.edu/~snort/snort_stat.html. This version now
> > reads the "NEW" format for "-A fast" alerts. It also does some processing
> > of the spp_portscan messages (this does need more work. Anyone with
> > suggestions on what the output should look like, please let me know.)
> >
> >
> > -Andrew
> >
--
Stuart Staniford-Chen --- President --- Silicon Defense
stuart
silicondefense.com
(707) 822-4588 (707) 826-7571 (FAX)
- Next message: Adam Olson: "Re: [snort] Binding snort to multiple interfaces"
- Previous message: Max Vision: "Re: [snort] A way to improve the signatures."
- In reply to: Andrew R. Baker: "Re: [snort] new snort_sort.pl release"
- Reply: Stuart Staniford-Chen: "Re: [snort] new snort_sort.pl release"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]