[Snort-users] snort + aris

Aaron McKinnon aaron at ...1376...
Fri May 11 15:27:22 EDT 2001

Not sure what you are asking about ARIS here, but to upload to the ARIS site
AFTER installing it would look something like this:

/usr/local/bin/sfclean  -u <username> -p <password> /var/log/snort/alert

replace ../sfclean with where ever you installed sfcleand and ../alert with
the name and location of the snort/SIDS log files you want to upload.

You need to set up an account with them to get/make the username password.

Aaron McKinnon
System Administrator
Fullerene Productions, Inc.
3250 Wilshire Blvd. Suite 2000
Los Angeles, CA 90010

-----Original Message-----
From: snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net]On Behalf Of Ron 'The
InSaNe One' Rosson
Sent: Friday, May 11, 2001 10:31 AM
To: snort-users at lists.sourceforge.net
Subject: [Snort-users] snort + aris

I am getting ready to reset up aris on my network but I am confused on
what my command line should be.

Here is my basic setup:

IDS system logging to a remote Database

Command line for snort is:
/usr/local/bin/snort -D -d -c /etc/snort.rules

Here is the output part of my  snort.rules file

output database: alert, mysql, user=nobody dbname=snort host=postal

Ron Rosson          			      ... and a UNIX user said ...
The InSaNe One                 			      rm -rf *
insane at ...322...     	            and all was /dev/null and *void()
Build a system even a fool can use,and only a fool will want to use it.

Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

More information about the Snort-users mailing list