[Snort-users] AW: (Snort-users) Newbie Question..
edwin1118 at ...125...
Sat Jan 19 00:50:04 EST 2002
i've checked your URL and it's a good reference indeed. but i've fond
some syntax errors in the snort-check program when i'm testing it. though i
tried modifying it but i still some errors. do u have the latest one?
i really wanted to test aprogram that will alert me via email based from
my snort logs. (im running RH7.2)
# Modified Program:
if a recipient file exists
if [ -s "$recipientfile" ] ; then
# generate the recipientlist with email adresses.
for i in `cat $recipientfile` ; do
echo "$*" | mail -s "Snort-Alert!!!" "$recipients"
>From: <sandro.poppi at ...3316...>
>To: <edwin1118 at ...125...>
>CC: <snort-users at lists.sourceforge.net>
>Subject: [Snort-users] AW: (Snort-users) Newbie Question..
>Date: Wed, 16 Jan 2002 08:05:00 +0100
>This works very well on the same machine without interfering snort. If
>monitoring more than one segment or your machine is somehow undersized it
>a better way to use a separate pc with those tools and the underlying
>and make snort log to the remote db.
> > Any suggestion?
>You might also want to have a look at my HOWTO at www.linuxdoc.org or
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp.
More information about the Snort-users