Snort mailing list archives
Snort for Windows, filter for syslog ?
From: "Turnquist,Wayne" <WayneTurnquist () catholichealth net>
Date: Thu, 12 Jan 2006 08:59:51 -0600
I have the newest version of Snort/Base on a windows 2003. I now have the rules tweaked to a point where i have very few alerts showing up in base. I have kiwi syslog up and running where i'm goint to use for very critical events are sent. Example, 3 fail logins with sound alerts, log all successful login to a file, and ect I was wondering if it is possible to have syslog alerts sent if the classification is for example trojan-activity along with logging to base? thanks wt ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_idv37&alloc_id865&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort for Windows, filter for syslog ? Turnquist,Wayne (Jan 12)
- RE: Snort for Windows, filter for syslog ? Michael Steele (Jan 12)