Skip to content

Tuning Snort with Host Attribute Tables – CSO Online – Security and Risk

Tuning Snort with Host Attribute Tables – CSO Online – Security and Risk.

Here is an article I wrote for CSO magazine, thought the readers of my blog might like to check it out as well.

I was asked to write a fairly technical article for CSO magazine about Snort, the problem is, which part of Snort do you write the article for?  An article about Snort can be very technical or not so technical.  One of the advantages of having Open-Source software.

In any case, enjoy.

View Comments

Categories: Joel Esler, Linux, Snort, Sourcefire, analysis, blogs, hacking, ids, logs, news, security, software, websites.

By Joel
— February 17, 2010 at 16:13
  • Yeah, but hopefully people won't cut and paste out of the article and will make their own.

    One can hope right?
  • Joel,

    Excellent article!

    One suggestion, though: you might want to mention that the HTML paragraph tags at the beginning and end of the sample attribute table are artifacts of that particular website and NOT part of a valid attribute table.

    Regards,
    Doug Burks
blog comments powered by Disqus