[Snort-users] View events via web

Erek Adams erek at ...577...
Tue Nov 6 13:52:04 EST 2001


On Tue, 6 Nov 2001, Wells, Kenneth L wrote:

> I'm trying to run the following command
>
> Cat /var/log/snort | /snort_stat.pl -f -h ? /alert.html
>
> I get the error command not found, even when I run it in the same directory
> where the command is..
>
> Can anyone help?

Try 'cat /var/log/snort/alert | ./snort_stat.pl -f -h > alert.html' instead.

Also note that snort_stat.pl is lookinf for /usr/bin/perl and not
/usr/local/bin/perl.

> Or does anyone know a better method to view events via a webpage??

ACID + MySQL/Postgres.  A bit easier to read, view and get more 'realtime'
alerts.

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net





More information about the Snort-users mailing list