RE: Urls accessed

["Perrymon, Josh L." <PerrymonJ () bek com>]

 Not sure if snort would be the way to do it.
I would log to a syslog server and tail the file to match 
your expression... when it does fire off a mail script.

Im doing this now with a wireless honeypot. It fires me off an email when it
leases DHCP.

I'm using suslog-ng and swatch on FreeBSD w/ postfix installed.


\JP



-----Original Message-----
From: Laura
To: snort-users () lists sourceforge net
Sent: 4/15/2004 12:42 PM
Subject: [Snort-users] Urls accessed

 
Hello ppl,

Is it possible to get an alarm everytime someone visit a web page. I
mean, i
need to get a notification with the IP address of the host and the URL
accessed.

If its possible, and idea of how can i do this?

TIA

Lau



-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users