Re: snort + email + alert

[Patrice.Arnal () alcatel fr]

Hi

I think that you can upgrade the answer in the faq with logsurfer.

http://www.cert.dfn.de/eng/logsurf/

This is a very nice free product that DOES NOT REQUIRE perl and this is a 
great advantage when you are "short" in CPU/memory ...

Cheers ! Prosit ! a votre santé ! 

Patrice ARNAL






Matt Kettler <mkettler () evi-inc com>
Sent by: snort-users-admin () lists sourceforge net
22/04/2003 19:09

 
        To:     "Mario Karcevski" <mario () imedbilling com>, 
<snort-users () lists sourceforge net>
        cc: 
        Subject:        Re: [Snort-users] snort + email + alert


At 10:23 AM 4/22/2003 -0400, Mario Karcevski wrote:

> Hi,
>
>
>
> What would be easiest way to set snort for alerting on Linux / Windows 
and 
> to email those alerts.
>
> Opinion and link to good article will be appreciated.

This question is a part of the snort FAQ:
http://www.snort.org/docs/faq.html#5.7


5.7 --faq-- --snort-- --faq-- --snort-- --faq-- --snort-- --faq--


Q: How do I get snort to e-mail me alerts?

A: Log to syslog and use swatch or logcheck.

You can look up swatch here:
         http://swatch.sourceforge.net/

-------
As per http://www.theadamsfamily.net/~erek/snort/drinking_game.txt the 
original question is a 5 drink post when playing snort-users drinking 
game:


Take one drink if.....
         The question is answered in the FAQ.
         The reply is "It's in the FAQ"
Take three drinks if.....
         "Can snort email me alerts?"





-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users





-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users