[Snort-devel] mailing feature

Erek Adams erek at ...835...
Thu Jul 31 11:49:16 EDT 2003


On Thu, 31 Jul 2003, antonat wrote:

> maybe a good solution would be to write the text to be e-mailed to a file
> and make a daemon which periodically looks for changes in the file and
> takes care to do the e-mail work

Right.

That's why we suggest Swatch!  :)  Log to syslog or alerts and have swatch
watch that.  Sends email as needed....  :)

If you need an example config:

	http://www.theadamsfamily.net/~erek/snort/snort-swatch.conf.txt

Cheers!

-----
Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson




More information about the Snort-devel mailing list