OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
RE: [Snort-users] learning snort

From: Patrick Walsh (pwalshesoft.com)
Date: Thu Sep 29 2005 - 10:12:39 CDT

> -----Original Message-----
> From: snort-users-adminlists.sourceforge.net
> [mailto:snort-users-adminlists.sourceforge.net] On Behalf Of James B
> Horwath
> Sent: Wednesday, September 28, 2005 3:46 PM
> To: snort-userslists.sourceforge.net
> Subject: [Snort-users] learning snort
>
> I am in the process of studying for the GCIA second exam which covers snort
> setup and use. I have been reading the mailing list, snort documentation
> and playing with a small controlled snort setup. Although RTFM is great, I
> learn better by actually doing hands on things. I am using a packet
> crafting tool like hping2 to watch and learn how snort works. I have been
> reading about tools like snot which use the snort configuration and build
> packets based on the configuration. This seems like an ideal way to learn

        I think you're thinking of sneeze. It didn't work for me when I tried
it, but I didn't dig very deep into it. It used to be in the contribs
section of the snort.org site, but I don't see it there anymore, so
perhaps it has been retired. A google search for "snort sneeze" found
the perl script though.

--
Patrick Walsh
eSoft Incorporated
303.444.1600 x3350
http://www.esoft.com/

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQBDPARmAhJNUdTnc2gRArwtAKCxf0bz3pThJ4Lh8k8ClwzJT+ufCACffvQD
fGGCRSVvI05jV/wtG8ChkpQ=
=6WN3
-----END PGP SIGNATURE-----

-------------------------------------------------------
This SF.Net email is sponsored by:
Power Architecture Resource Center: Free content, downloads, discussions,
and more. http://solutions.newsforge.com/ibmarch.tmpl
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users