Snort mailing list archives
RE: Tell snort to resolve ip or use /etc/hosts?
From: SRH-Lists <giermo () 333tech com>
Date: Wed, 14 Jan 2004 14:40:06 -0600
Hey all! Since I'm blithering on in here I might as well get all my questions out now ;) Any way to get snort to resolve ip addresses? Looked around and googled but didn't find much on it. Thanks! James
That would kinda tip off the attack that you had something or other watching them and would also give them the IP of your snort box (if they can see the traffic to their DNS) (Along with the overhead concerns that someone else mentioned) -steve ------------------------------------------------------- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Tell snort to resolve ip or use /etc/hosts? James Nonya (Jan 14)
- Re: Tell snort to resolve ip or use /etc/hosts? james (Jan 14)
- Re: Tell snort to resolve ip or use /etc/hosts? Matt Kettler (Jan 14)
- <Possible follow-ups>
- RE: Tell snort to resolve ip or use /etc/hosts? SRH-Lists (Jan 14)