[Snort-users] guardian + snort

Jyri Hovila jyri.hovila at ...2940...
Sat Sep 8 07:36:02 EDT 2001


Hi Dariusz, and welcome! =)

Guardian does not understand log entries written by spp_portscan. I
believe someday someone is going to make a script which can handle
spp_portscan alerts too. If you can code with Perl, you can become that
person. =) Guardian.pl is pretty simple, it shouldn't be difficult to
modify it.

Yours,

Jyri





More information about the Snort-users mailing list