[Snort-users] email problems with ACID

Ronneil Camara ronneilc at ...4042...
Tue Jan 22 15:20:02 EST 2002


Hi guys,

Is there now a functionality in acid that allows us to create alerts just like demarc.
If none, it's ok since I am using swatch.

> -----Original Message-----
> From: Saad Kadhi [mailto:bsdguy at ...4401...]
> Sent: Tuesday, January 22, 2002 4:22 PM
> To: James Lowey
> Cc: Snort Users; Roman
> Subject: Re: [Snort-users] email problems with ACID
> 
> 
> On Tue, 2002-01-22 at 19:02, James Lowey wrote:
> > Hopefully this is the correct list!
> > I am having problems with ACID sending email on a
> > query.  I am using Snort 1.8.3 connecting to a mysql
> > database 3.23.47, php 4.06 and ACID 0.9.6b19.  
> > Here is what happens:
> > I select an IP address in ACID for a query, it runs
> > gives me the list of alerts,  then I try to send it to
> > my email account by selecting the action of email
> > alerts and put my email address in the action argument
> > field,  the query runs then spits out this error:
> > 
> > EXPORT ERROR: Could not send exported alerts to ''.
> > Check the mail configuration in PHP
> The code that generated this alert is starting at line 642 of
> acid_action.inc. There is a small typo in the name of a variable. 
> Instead of:
>   if ( !send_email($mail_recip, $mail_subject, $body, $mail_header) )
>      ErrorMessage("EXPORT ERROR: Could not send exported alerts to
> '".$message_recip."'.  Check the mail configuration in PHP.");  
> it should read:
>   if ( !send_email($mail_recip, $mail_subject, $body, $mail_header) )
>      ErrorMessage("EXPORT ERROR: Could not send exported alerts to
> '".$mail_recip."'.  Check the mail configuration in PHP.");  
> 
> note the change from $message_recip to $mail_recip (Roman, can you
> please commit the diff in cvs if this hasn't been done 
> already ?). After
> doing this, try again to see if your mail address is taken 
> into account.
> Then try to make a small PHP test page that sends you email to check
> that your PHP is compiled w/ everything needed for email interaction.
> Check the mail() function here:
> http://www.php.net/manual/en/function.mail.php
> 
> HTH
> -- 
> /Saad --  [bsdguy at ...4401...] 
> [pgp keyid: 35592A6D http://pgp.mit.edu]
> # buy a geek-in-a-can, point nozzle at technical problem and spray
> # if desesperate degauss your screen. it might solve your pb as well
> 
> 
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
> 




More information about the Snort-users mailing list