Snort mailing list archives

RE: Re: Swatch like program for windows


From: Tom Sevy <tsevy () epx com>
Date: Sat, 30 Mar 2002 08:48:53 -0500

Check out the kiwi syslog daemon for win32 at http://www.kiwisyslog.com


-----Original Message-----
From: Michael Steele [mailto:michaels () silicondefense com] 
Sent: Friday, March 29, 2002 4:31 PM
To: 'Raymond Jacob'; snort-users () lists sourceforge net
Subject: RE: [Snort-users] Re: Swatch like program for windows


Ray,

Snort will send alerts to MS Syslog. What I'm looking for is for
something that will operate like Swatch and send predefined alerts to
Email using a SMTP server, and hopefully run as a service. A perl script
would work, because I thing perl scripts can be compiled to executables
on Windows (not real sure, but I seem to have read something on this).

I have received a crud way to do this but it's not for the average
inexperienced user. I will post it on our site and leave a link here or
anyone can email me and I will pass it along.  Hopefully we will get
something that is very simple to use. If I receive anything else I will
pass it along to everyone.

Thanks to everyone that is helping.

Thanks,

-Michael Steele - michaels () silicondefense com

-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of Raymond
Jacob
Sent: Friday, March 29, 2002 12:08 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Re: Swatch like program for windows

I know there is perl script that can read the event viewer
and send it in syslog fashion to a syslog server.
See http://www.aplawrence.com/Reviews/NTSyslog.html.
You may be able to modify the script to pump the
out put to swatch which is a perl script.
I found the swatch url at:
http://cosi-nms.sourceforge.net/alpha-progs.html ->
http://www.oit.ucsb.edu/~eta/swatch/

_________________________________________________________________
Get your FREE download of MSN Explorer at
http://explorer.msn.com/intl.asp.


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: