Snort mailing list archives

SMB alerts


From: "Scott Elgram" <SElgram () verifpoint com>
Date: Fri, 13 Aug 2004 13:54:59 -0700

Hello,
    I am having a bit of trouble getting SMB alerts to work.  I have compiled snort-2.1.3 
"--with-mysql=/usr/local/mysql --enable-smbalerts".  And I added this to the ruleset containing the rules I want to be 
alerted for.

ruletype smb_db_alert {
    type alert
    output alert_msb: workstation.list
    output database: log, mysql, user=<dbuser> password=<password> dbname=snort host=localhost encoding=hex detail=Full
}

However, After all that when I start snort i get;

ERROR: unknown output plugin: 'alert_smb'Fatal Error, Quitting

Any help would be appreciated greatly.
Thanks
-Scott

Current thread: