This is a group to gather all users of Snort in any form. Be it pure open source, Sourcefire or any other incantation .
If you can parse this, this group is for you:
alert ip any any ->; any any (msg: "To much Bacon";)
No sales pitches allowed, technical talks about IPS, Monitoring, Snort rule tuning are more than welcome!