Re: Snort and Gaultlet

[James Hoagland <jim () SiliconDefense com>]

At 10:01 PM +0000 3/5/03, steve nutt wrote:
> I am looking for a script, program, etc that is capable of formatting
> firewall logs from Gauntlet firewall on Solaris into Snort file format which
> can be analyzed by SnortSnarf or some other data viewer.
>
> Has anyone heard of such a program or currently use something like this?

If you can write Perl, you could always write a new input module for 
SnortSnarf.  SnortSnarf isn't inherently Snort specific, except that 
the two currently available input modules read input from Snort 
sources.

Best regards,

  Jim
--
|*     Jim Hoagland, Associate Researcher, Silicon Defense     *|
|*    --- Silicon Defense: The Cyberwar Defense Company ---    *|
|*   jim () SiliconDefense com, http://www.silicondefense.com/    *|
|*  Voice: (530) 756-7317                 Fax: (530) 756-7297  *|


-------------------------------------------------------
This SF.net email is sponsored by: Etnus, makers of TotalView, The debugger 
for complex code. Debugging C/C++ programs can leave you feeling lost and 
disoriented. TotalView can help you find your way. Available on major UNIX 
and Linux platforms. Try it free. www.etnus.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users