Snort mailing list archives

Alert caching for ACID as a cron job


From: "Reeves, Michael (GEAE, Compaq)" <michael.reeves () ae ge com>
Date: Mon, 17 Sep 2001 13:25:07 -0400

I have a sensor that sits on a 100mbit pipe and I get TONS of events. The
problem I am running into is that each day when I get in I have to wait for
it to cache a few hunderd thousand events. Looking into the alert_cache.inc
I see the code but I don't have an environment to test it. (I had to fight
for the linux boxes I have now) Does anyone have a shell script that does
this already that you run as a cron job? I want to run one every 15 minutes
or so.. Any info would be great..

Mike Reeves
Security Administrator 
GE Aircraft

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: