Snort mailing list archives
Re: alert_unixsock
From: Erek Adams <erek () snort org>
Date: Thu, 16 Oct 2003 19:13:37 -0400 (EDT)
On Thu, 16 Oct 2003, [iso-8859-1] NicĀ¤ wrote:
Is it possible to get a snort rule example with the alert_unixsock used please ?
It's not a per rule item. All alerts go to a UNIX based socket, and can be picked up from another program via that socket. Cheers! ----- Erek Adams "When things get weird, the weird turn pro." H.S. Thompson ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. SourceForge.net hosts over 70,000 Open Source Projects. See the people who have HELPED US provide better services: Click here: http://sourceforge.net/supporters.php _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- alert_unixsock William Morris (Oct 02)
- <Possible follow-ups>
- alert_unixsock NicĀ¤ (Oct 16)
- Re: alert_unixsock Erek Adams (Oct 16)
- Re: alert_unixsock Frank Knobbe (Oct 16)
- Re: alert_unixsock Erek Adams (Oct 22)
- Re: alert_unixsock Erek Adams (Oct 16)