Re: portscan2-ignore... ???

[Erek Adams <erek () snort org>]

On Mon, 18 Aug 2003, Michael D Schleif wrote:

> Sorry, I am using debian, and it contains: /etc/cron.daily/5snort, which
> in turn uses this: /usr/sbin/snort-stat -- only now, I realize that
> these are debian-specific.

Actually, that perl script (snort-stat) is included in the contrib
directory.  I'm not sure that it's currently maintained...

You might want to check out some of the other [0] things for doing
anaylsis.

Check out snortalog.  It was written to be a replacement for snort-stat.

Cheers!

-----
Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson


[0]     http://www.snort.org/dl/contrib/data_analysis/


-------------------------------------------------------
This SF.net email is sponsored by Dice.com.
Did you know that Dice has over 25,000 tech jobs available today? From
careers in IT to Engineering to Tech Sales, Dice has tech jobs from the
best hiring companies. http://www.dice.com/index.epl?rel_code=104
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users