Re: dragon and snort logs

From: Brian <bmc(at)snort.org>
Date: Tue May 13 2003 - 01:20:06 EDT

On Mon, May 12, 2003 at 07:54:01PM -0400, David Markle wrote:
> Send the snort alerts via syslog to a remote host. Then scoop up the remote

It is a fairly common occurrence for Enterasys customers to use snort.

So common that Enterasys distributes utilities to convert snort signatures into a policy lib file so you can use their HIDS to monitor snort log files.

Ask your Enterasys support person for help if you can't figure out their tools.

-brian

---

INTRUSION PREVENTION: READY FOR PRIME TIME? IntruShield now offers unprecedented Intrusion IntelligenceTM capabilities - including intrusion identification, relevancy, direction, impact and analysis - enabling a path to prevention.

Download the latest white paper "Intrusion Prevention: Myths, Challenges, and Requirements" at: http://www.securityfocus.com/IntruVert-focus-ids2

---

Received on Wed May 14 10:56:23 2003