Snort Documentation Survey

Hello, Snort community! We’re gathering some information to help bring you better and more useful content about Snort. In particular, we want to know about your experience looking for documentation and information to help navigate snort alerts. Do you need information that just isn't available when you search? We want to fill those gaps. Your feedback is exceptionally valuable for fine-tuning this improvement process.

Question Title

* 1. Do you use Snort in an open source environment or as part of Firepower Threat Defense (FTD) on ASA?

Open Source

FTD

Question Title

* 2. What Snort.org documentation have you used?

Getting-started documentation

General documentation for ongoing learning and troubleshooting

SID/rule documentation (either on Snort.org or as it displays in a console)

None, the documentation isn't useful to me

Question Title

* 3. Do you feel that the current documentation is adequate, or could it use fleshing out?

Pretty good now

Needs some work

Question Title

* 4. In each of these areas, how much information were you able to find?

	Little to no information	Some info, but not what I needed	Everything I needed	N/A
General info: What is Snort? How to setup?	General info: What is Snort? How to setup? Little to no information	General info: What is Snort? How to setup? Some info, but not what I needed	General info: What is Snort? How to setup? Everything I needed	General info: What is Snort? How to setup? N/A
Creating rules and adding them	Creating rules and adding them Little to no information	Creating rules and adding them Some info, but not what I needed	Creating rules and adding them Everything I needed	Creating rules and adding them N/A
Using Snort, scanning and processing alerts	Using Snort, scanning and processing alerts Little to no information	Using Snort, scanning and processing alerts Some info, but not what I needed	Using Snort, scanning and processing alerts Everything I needed	Using Snort, scanning and processing alerts N/A
Rules documentation, alert information	Rules documentation, alert information Little to no information	Rules documentation, alert information Some info, but not what I needed	Rules documentation, alert information Everything I needed	Rules documentation, alert information N/A

Question Title

* 5. The last time you had trouble finding information, what were you looking for?

Question Title

* 6. What did you do if you couldn't find documentation on something?

Googled it

Gave up and ignored the issue

Other (please specify)

Question Title

* 7. If you found information externally (Google, forums, etc.), which sites had the best information?

Question Title

* 8. The Snort rules documentation is an area we particularly want to improve. Rank these options from most to least useful to you.

Vulnerability type

Known false positive

Trigger events for this alert

More detailed explanation of rules and detection process

Known false negatives

Snort Documentation Survey

General

Question Title

* 1. Do you use Snort in an open source environment or as part of Firepower Threat Defense (FTD) on ASA?

Question Title

* 2. What Snort.org documentation have you used?

Question Title

* 3. Do you feel that the current documentation is adequate, or could it use fleshing out?

Question Title

* 4. In each of these areas, how much information were you able to find?

Question Title

* 5. The last time you had trouble finding information, what were you looking for?

Question Title

* 6. What did you do if you couldn't find documentation on something?

Question Title

* 7. If you found information externally (Google, forums, etc.), which sites had the best information?

Question Title

* 8. The Snort rules documentation is an area we particularly want to improve. Rank these options from most to least useful to you.

Question Title

* 9. Is there additional information you would like to see in rule documentation that we don't currently include?

Question Title

* 10. Would you be interested in joining a focus group to develop ideas for Snort rules documentation? Leave an email address.