[Snort-users] Urls accessed

Perrymon, Josh L. PerrymonJ at ...8353...
Thu Apr 15 11:08:08 EDT 2004

 Not sure if snort would be the way to do it.
I would log to a syslog server and tail the file to match 
your expression... when it does fire off a mail script.

Im doing this now with a wireless honeypot. It fires me off an email when it
leases DHCP.

I'm using suslog-ng and swatch on FreeBSD w/ postfix installed.


-----Original Message-----
From: Laura
To: snort-users at lists.sourceforge.net
Sent: 4/15/2004 12:42 PM
Subject: [Snort-users] Urls accessed

Hello ppl,

Is it possible to get an alarm everytime someone visit a web page. I
mean, i
need to get a notification with the IP address of the host and the URL

If its possible, and idea of how can i do this?



This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

More information about the Snort-users mailing list