IN SNORT If I only went to a few web sites, why are there so many alerts?
What are the advantages of logging more information to the alerts file?
What are the disadvantages of logging more information to the alerts file?
What are the advantages of using rule sets from the snort web site?