nicole,
what is the best practice for sourcefire? I have pointed sourcefire to local4 and created a new snort connector looking at local4.log. Im not seeing anything and dont see any detailed documentation like for the other vendors.
nicole,
what is the best practice for sourcefire? I have pointed sourcefire to local4 and created a new snort connector looking at local4.log. Im not seeing anything and dont see any detailed documentation like for the other vendors.