[Snort-users] Snort 1.7 and alerts

shawn . moyer shawn at ...1184...
Mon Mar 5 15:26:39 EST 2001


Oops! BTW, I believe both of the scripts I mentioned will just mail
stuff to one mailbox, sow hat you would then need to do is set up your
favorite MUA with an alias that mails to a group, something like:

snort-alerts: bob mary jim cletus leroy pedro

in /etc/aliases or the equivalent.

--shawn



> Claude Bailey wrote:
> 
> Did anyone ever respond to the query below?  I'm looking for the same
> thing but I'm not logging to a database
> 
> -----Original Message-----
> From: John Johnson [mailto:john at ...599...]
> Sent: Thursday, February 22, 2001 4:44 PM
> To: snort-users at lists.sourceforge.net
> Subject: [Snort-users] Snort 1.7 and alerts
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
>  I there a way I can set snort to Send Emails to a list of address
>  when say it get's an alert  15 times in say 5 minutes
> form a single host? I am running snort 1.7 on Mandrake 7.2 logging
> alerts to a MySQL Database




More information about the Snort-users mailing list