Re: SNORT Reporting Tool ........ ???????

[Erek Adams <erek () theadamsfamily net>]

On Mon, 11 Nov 2002, Atul Shrivastava wrote:

[...snip...]

There are quite a few tools that you could use.  There is a perl script in
the /contrib directory that you can call from cron to send a nightly email
to whomever you chooose.

> Also one more query that how can we configure so that some of the
> specified alerts (let say that incorrect telnet login, or something
> else)  are directly mailied to a specified mail account throuch some
> mail server. We have our own mail server, so can now it be possible that
> we create a mail account on our mail server and then we configure the
> linux machine such that when a specified alert is generated then
> immediately it is mailed to that account. This I think is a easy way to
> handle higher priority alerts because the administrtor is not always be
> able to see the ACID alert console, but he may be able to see his/her
> mails regularly.  So please think over it and give me reply.  Thanks in
> advance.

FAQ Reading time [0].

Short answer, Snort can't.  Something else can.

Cheers!

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net


[0]     http://www.snort.org/docs/faq.html#5.7



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users