From owner-freebsd-questions  Tue Aug 28  7:47:55 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from web10003.mail.yahoo.com (web10003.mail.yahoo.com [216.136.130.39])
	by hub.freebsd.org (Postfix) with SMTP id EEFEA37B408
	for <questions@freebsd.org>; Tue, 28 Aug 2001 07:47:51 -0700 (PDT)
	(envelope-from ronj_clark@yahoo.com)
Message-ID: <20010828144750.29895.qmail@web10003.mail.yahoo.com>
Received: from [199.34.24.199] by web10003.mail.yahoo.com via HTTP; Tue, 28 Aug 2001 07:47:50 PDT
Date: Tue, 28 Aug 2001 07:47:50 -0700 (PDT)
From: Ronnie Clark <ronj_clark@yahoo.com>
Reply-To: Ronj_clark@fellowshipchurch.com
Subject: RE: xinetd   -   snort
To: questions@freebsd.org
Cc: midiostri@in.gr
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

> Dimitri wrote:
> btw. is anybody here using xinetd and/or snort ?
> 
> Are they any good?

This is just my $.02 worth...
And I cannot speak for "xinetd", so here goes...

Snort is great. I setup a box at work to monitor a
couple of boxes just for testing. I happen to setup
this box right after Code Red went nuts and I got lots
of notifications. I set this up with SnortSnarf and
then I was able to see all of my alerts / reports
using a browser. 

If you have any questions, please let me know how I
can help...

RC

__________________________________________________
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message