[Snort-users] Snort, Windows 2000 - running external program on alert.

Ueli Kistler iuk at ...1171...
Fri Dec 20 11:07:03 EST 2002


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

IDScenter can execute any script/program you want if an alert was detected.
E-Mail support is built-in.. more features are available: log rotation, 
AutoBlock plugins, Configurations wizard for Snort, etc.
More information on www.packx.net.

Regards,
    Eclipse
    eclipse at ...5277...
    www.packx.net

- --

Hicks, John wrote:

>IDSCenter has built-in email functionality, but not 'any' program. If you're
>looking for run x if y is found, try doing it via syslog output.
>
>hth,
>John
>
>-----Original Message-----
>From: Brian Strickland [mailto:brians at ...7821...]
>Sent: Friday, December 20, 2002 12:35 PM
>To: 'snort-users at lists.sourceforge.net'
>Subject: [Snort-users] Snort, Windows 2000 - running external program on
>alert.
>
>
>is there a way directly from snort to run an external program when an alert
>is generated or indirectly (reviewing log file or sql database) to run an
>external program when a alert occurs.  Like send an email, pager program,
>etc. 
>
>Brian Strickland
>
>
>
>-------------------------------------------------------
>This SF.NET email is sponsored by:  The Best Geek Holiday Gifts!
>Time is running out!  Thinkgeek.com has the coolest gifts for
>your favorite geek.   Let your fingers do the typing.   Visit Now.
>T H I N K G E E K . C O M        http://www.thinkgeek.com/sf/
>_______________________________________________
>Snort-users mailing list
>Snort-users at lists.sourceforge.net
>Go to this URL to change user options or unsubscribe:
>https://lists.sourceforge.net/lists/listinfo/snort-users
>Snort-users list archive:
>http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
>
>-------------------------------------------------------
>This SF.NET email is sponsored by:  The Best Geek Holiday Gifts!
>Time is running out!  Thinkgeek.com has the coolest gifts for
>your favorite geek.   Let your fingers do the typing.   Visit Now.
>T H I N K G E E K . C O M        http://www.thinkgeek.com/sf/
>_______________________________________________
>Snort-users mailing list
>Snort-users at lists.sourceforge.net
>Go to this URL to change user options or unsubscribe:
>https://lists.sourceforge.net/lists/listinfo/snort-users
>Snort-users list archive:
>http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
>
>  
>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE+A2oZad+bo3Jl9EkRAoasAKC+EzXFO0Bk8alWVypcCDhQ5qeveACbBJ0K
t904ROF+ggXRjYhznTxsbas=
=bXyj
-----END PGP SIGNATURE-----





More information about the Snort-users mailing list