[Snort-users] alert methods

Martin Roesch roesch at ...421...
Fri Oct 6 23:04:12 EDT 2000


You can also use things like swatch or logsurfer... :)

     -Marty

"Robert E. Leever" wrote:
> 
> hi
> 
> I just created a shell script that
> wakes up once a minute, looks at the
> alert log and if it's changed size
> [using wc] tails me the appropriate
> number of lines into mail, and then
> resets the script variable.
> 
> everythings internal so it just runs
> sorta like a daemon.
> 
> seems to work pretty well.
> 
> Bob Leever
> +-------------------------------------------------------------------------+
> | If you put the federal government in charge of the Sahara Desert, in 5  |
> | years there'd be a shortage of sand. --Milton Friedman                  |
> |                                                                         |
> | If you expect a nation to be ignorant and free, you expect              |
> | what never was and can never be.     --Thomas Jefferson                 |
> |                                                                         |
> | "By all means marry.  If you get a good wife you will become happy,     |
> |  and if you get a bad one you will become a philosopher." --Socrates    |
> +-------------------------------------------------------------------------+
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> http://lists.sourceforge.net/mailman/listinfo/snort-users

-- 
Martin Roesch
roesch at ...421...
http://www.snort.org



More information about the Snort-users mailing list