<interesting & spot on remarks>

quoted text
> Just don't get ISS crap.
>
> Also, snort is good, but you must know what you're doing.  Our snort box,
> running on an old throw away box, and only capturing/analyzing 10 minutes of
> every hour, is giving us *MORE* useful data than half a mil worth of ISS
> crap.

Care to elaborate? :)

<more interesting information>

Thanks!