[Snort-users] email problems with ACID

Saad Kadhi bsdguy at ...4401...
Tue Jan 22 14:24:04 EST 2002


On Tue, 2002-01-22 at 19:02, James Lowey wrote:
> Hopefully this is the correct list!
> I am having problems with ACID sending email on a
> query.  I am using Snort 1.8.3 connecting to a mysql
> database 3.23.47, php 4.06 and ACID 0.9.6b19.  
> Here is what happens:
> I select an IP address in ACID for a query, it runs
> gives me the list of alerts,  then I try to send it to
> my email account by selecting the action of email
> alerts and put my email address in the action argument
> field,  the query runs then spits out this error:
> 
> EXPORT ERROR: Could not send exported alerts to ''.
> Check the mail configuration in PHP
The code that generated this alert is starting at line 642 of
acid_action.inc. There is a small typo in the name of a variable. 
Instead of:
  if ( !send_email($mail_recip, $mail_subject, $body, $mail_header) )
     ErrorMessage("EXPORT ERROR: Could not send exported alerts to
'".$message_recip."'.  Check the mail configuration in PHP.");  
it should read:
  if ( !send_email($mail_recip, $mail_subject, $body, $mail_header) )
     ErrorMessage("EXPORT ERROR: Could not send exported alerts to
'".$mail_recip."'.  Check the mail configuration in PHP.");  

note the change from $message_recip to $mail_recip (Roman, can you
please commit the diff in cvs if this hasn't been done already ?). After
doing this, try again to see if your mail address is taken into account.
Then try to make a small PHP test page that sends you email to check
that your PHP is compiled w/ everything needed for email interaction.
Check the mail() function here:
http://www.php.net/manual/en/function.mail.php

HTH
-- 
/Saad --  [bsdguy at ...4401...] 
[pgp keyid: 35592A6D http://pgp.mit.edu]
# buy a geek-in-a-can, point nozzle at technical problem and spray
# if desesperate degauss your screen. it might solve your pb as well





More information about the Snort-users mailing list