[Snort-users] Snort reports

Pablo Sanchez petduo at ...11827...
Wed Feb 15 10:48:02 EST 2006


Hi guys,

I know that almost everybody uses ACID, BASE and so on to check the snort
logs and alerts. But I'm needing to develop my own interface for the snort
database.
So I'd like to know if someone has already made some reports using the
database.
I'm searching for SQL statements to make my own reports.
Example: Top 15 alerts, Top 15 services, Top 15 IP address attacked, and so
on...

I'm also taking a look at the database schema. (
http://www.andrew.cmu.edu/user/rdanyliw/snort/snortdb/snortdb_schema.html ).

Best regards,

Pablo
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20060215/d250b63c/attachment.html>


More information about the Snort-users mailing list