Re: SNORT Testing

["Richard Bejtlich" <taosecurity () gmail com>]

On 2/27/06, Byron Sonne <blsonne () rogers com> wrote:
> The tools that come to mind for me are 'stick' and 'snot':
> http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0096.html

Hello,

Stick, Snot, and all other stateless tools are a waste of time, and
have been since mid-2001.

http://seclists.org/lists/focus-ids/2004/Nov/0040.html

Sincerely,

Richard

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
------------------------------------------------------------------------