Snort mailing list archives

Re: what's supposed to be the difference?


From: Matt Kettler <mkettler () evi-inc com>
Date: Thu, 16 Sep 2004 10:37:00 -0400

At 02:41 AM 9/16/2004, Jason Monroe \"JC\" wrote:
I don't seem to understand but what's supposed to be the difference
between http://www.snort.org/snort-db/?sid=1-270 and
http://www.snort.org/snort-db/sid.html?sid=1-270

I tried for at least 5 minutes to get something useful out of the search
dialog at the top of http://www.snort.org/snort-db/ entering actual SID
numbers, common keywords that are in rules yet the page never returns
anything different visually than when you hit it for the first time. Is
there some magic incantation necessary similar to which Marty
demonstrated with the sourcefire sensor demo.

If you use the search box in the lower-left corner of the main page, it leads you to a third, even more useful place:

http://www.snort.org/cgi-bin/sigs-search.cgi

Here you can search by SID, message or CVE.

Looks like the website needs some cleanup so that all the searches use the same page, instead of some new page which may not be as useful.


-------------------------------------------------------
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.
Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: