[Snort-users] RE: Hola

Petriz, Pablo ppetriz at ...3815...
Wed Nov 7 12:16:32 EST 2001


>From: "Jorge Severino Diaz" <jseverino at ...4026...>
>To: <snort-users at lists.sourceforge.net>
>Date: Wed, 7 Nov 2001 13:47:56 -0300
>Subject: [Snort-users] Hola
>
>Soy nuevo y queria hacer una consulta...
>
>snort puede enviar alertas via winpopup (samba) ?
>

Sí puede.

Más abajo copio parte del archivo SnortUsersManual.pdf que podés bajar de
www.snort.org para obtener más 
información.

Consejo: hacé las consultas en inglés para obtener más respuestas.

PABLO
---------------------------------------
2.5.4 Alert_smb
This plugin sends WinPopup alert messages to the NETBIOS named machines
indicated within the file specified as an
argument to this output plugin. It should be noted that use of this plugin
is not encouraged as it executes an external
executable binary (smbclient) at the same privilege level as Snort, commonly
root. The format of the workstation file
is a list of the NETBIOS names of the hosts that wish to receive alerts, one
per line in the file.
Format
alert_smb: <alert workstation filename>
output alert_smb: workstation.list
---------------------------------------




More information about the Snort-users mailing list