[Snort-users] Re: AW: (Snort-users) AW: (Snort-users) Newbie Question..

Edwin Pua edwin1118 at ...125...
Tue Jan 22 03:05:03 EST 2002

Hi Sandro,

   So far there's no error in the program after changing it #!/bin/bash and 
upon compiling it.

   But it doesnt send the actual alert file. I mean, i did a simulation test 
using nmap to alert my snort box. But the snort-check program didn't send 
any email, though i've seen in the snort box using "tail -f 
/var/log/snort/alert" file that there's some port scanning going on.

   What will i edit or add in the snort-check program to email the actual 
alert files of snort in real time once attacks have been detected by the 

   thanx for ur help.


>From: <sandro.poppi at ...3316...>
>To: <edwin1118 at ...125...>
>CC: <snort-users at lists.sourceforge.net>
>Subject: AW: (Snort-users) AW: (Snort-users) Newbie Question..
>Date: Mon, 21 Jan 2002 07:20:00 +0100
>I checked the modified program on RH 7.0 and 7.2 and it worked without 
>The only thing I did was adding a # before the line
>"if a recipient file exists"
>Could you please be more specific if the error still exists? Please include 
>error message and line number. You may take a look on /bin/sh: If it does 
>point to /bin/bash then this may be the error. Replace #!/bin/sh with
>#!/bin/bash. I will fix this in the next version to be more specific.

Send and receive Hotmail on your mobile device: http://mobile.msn.com

More information about the Snort-users mailing list