Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email firstname.lastname@example.org
Re: [Snort-users] Smb output
From: Nerijus Krukauskas (nk99delfi.lt)
Date: Thu Jul 22 2004 - 00:43:54 CDT
Frank Knobbe wrote:
> On Wed, 2004-07-21 at 17:13, Michael Sconzo wrote:
>>Ok, if you re-wrote smbclient (or at least the part that does the
> No, no. I'm saying don't use smbclient at all. Have Snort populate a UDP
> packet and send it out.
That could be an option. But...
>>Then that gets into duplicating work etc ... but if you or somebody
>>else does it, I wouldn't complain either, and would probably use it.
> Heh... I don't even have much time at the moment to work on Snortsam. :(
> And since I don't use the SMB alert, there is no incentive for me
> either. Speaking of Snortsam, I'm doing something very similar there.
...no one is interested in rewriting this.
And one more thing. How many WinPopUp windows you gonna find after
you've been out for just one hour (e.g. having lunch)? Personally I
wouldn't want to deal with several hundred open windows at once. :)
The man who sets out to carry a cat by its tail learns something that
will always be useful and which never will grow dim or doubtful. --
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
Snort-users mailing list
Go to this URL to change user options or unsubscribe:
Snort-users list archive: