<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Will,<div><br></div><div>I look forward to helping out. At the moment, I'm running Suricata in IDS mode, while I have Snort running in in-line mode to actively protect my network. When Suricata gets to be production (or even remotely stable), I'll be happy to run it live!</div><div><br></div><div>I enjoy working live with other folks as well, so if anybody wants to test code or what-not that they're working on, let me know privately and I'll get you my MSN or Google Talk address.</div><div><br></div><div>I can likely get us hooked up with a steady supply of packet captures (I have a network stream-to-disk utility). I've built my own network monitoring system using a mix of tools (Snort, Gulp), along with a couple of PHP scripts that I've written to log other pertinent things as well.</div><div><br></div><div>I will have to get it cleared with the IT Team before I can actually supply the PCAP files, but once I do, I'll be happy to send them to whoever.</div><div><br></div><div>Thanks guys & I look forward to working with you!</div><div>~Brant</div><div><br></div><div><div>On Jan 17, 2010, at 8:13 PM, Will Metcalf wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">Brant,<br><br>This is exactly the sort of thing we are looking for! If you would be willing to test the engine and provide us with feedback it would be greatly beneficial. Additionally if anybody else has any feedback good or bad please share it with us. Maybe this is good time to re-introduce the question of what are list subscribers looking for in an IDP solution that isn't there today? What problems are you having in your environments that are not being addressed by existing tools etc? I cannot guarantee that we will be able to pull off everything that you guys request but this sort of feedback is like gold to us.<br>
<br>Regards,<br><br>Will<br><div class="gmail_quote">On Sun, Jan 17, 2010 at 11:04 AM, Brant Wells <span dir="ltr"><<a href="mailto:bwells@tfc.edu">bwells@tfc.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Hey Everybody,<br>
<br>
I've been a Network guy for a few years and have been a snort user for the last year or so. I'm not a C programmer or anything fancy like that, but I look forward to helping out in any way that I can!<br>
<br>
I run a small college network of about 1100 users during an active semester. So I have plenty of data and information to test suricata against!<br>
<br>
Anyhow, I hope this finds yawl well!<br>
<br>
See Yas!<br>
~Brant<br>
<br>
<br>
_______________________________________________<br>
Oisf-users mailing list<br>
<a href="mailto:Oisf-users@openinfosecfoundation.org">Oisf-users@openinfosecfoundation.org</a><br>
<a href="http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" target="_blank">http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a><br>
</blockquote></div><br>
</blockquote></div><br></body></html>