[Snort-users] Firing off Abuse email based on Snort Traffic

Mark Rowlands mark.rowlands at ...752...
Thu May 29 21:22:07 EDT 2003


On Thursday 29 May 2003 7:44 pm, Matt Howell wrote:
> All...
>
> We are starting to really see the benefit of our Snort deployment
> project, and inevitably the project's scope has been expanded.  We would
> like to set up a Sensor to automatically send Abuse emails to the ISP of
> any hosts that break our Portscan threshold.   Has anyone seen a project
> / product out there that does this already?
>
> Any input would be appreciated...
>
> TIA,
>
> -Matt

see www.dshield.org





More information about the Snort-users mailing list