Snort mailing list archives
ACID name resolution
From: Keg <snrtlst () netscape net>
Date: Tue, 08 Apr 2003 16:48:36 -0400
When I look at the alert (any) I see links to source address and destination address. Each time I try to follow thos links ACID tries to resolve those IPs to names and it take A LOT of time, if you have 200 hundred addresses in the list then it takes forever for ACID to timeout on those addresses and present the list. I took a look into the firewall config and I see that all domain-tcp and domain-udp queries are allowed from this box, sop it's not a firewall issue. Is there any way to to make ACID no to resolve IP addresses when it presents the list of source/destination ip addresses?
Thanks. --Your favorite stores, helpful shopping tools and great gift ideas. Experience the convenience of buying online with Shop@Netscape! http://shopnow.netscape.com/
-------------------------------------------------------This SF.net email is sponsored by: ValueWeb: Dedicated Hosting for just $79/mo with 500 GB of bandwidth! No other company gives more support or power for your dedicated server
http://click.atdmt.com/AFF/go/sdnxxaff00300020aff/direct/01/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- ACID name resolution Keg (Apr 08)
- Re: ACID name resolution Erick Mechler (Apr 08)