[Snort-users] Expect Script

Nicholas Horton fivetenets at ...14399...
Fri Aug 17 09:18:54 EDT 2012


> Hello Snort Developers,
> 
> Is it possible to kick off an expect script if a specific alert gets triggered?
> 
> If so where and how do you tie the script to the alert?
> 
> Also, if it's possible to kick off an expect script can I pass variables such as the source ip from the alert to the script?
> 
> Thanks in advance!
> Nick




More information about the Snort-users mailing list