Snort mailing list archives
Re: Snort daily reports
From: "Dave Rutherford" <dave () evilpettingzoo com>
Date: Tue, 16 Jan 2007 19:06:51 -0500
On 1/4/07, Dave Rutherford <dave () evilpettingzoo com> wrote:
On 1/3/07, info+lucretia.ca <info () lucretia ca> wrote:Snort daily reports? What tool is this? Snort has no email or reporting functions.That's a fair question; I've no idea. As I said, I'm using the Debian packages, and I don't have anything installed with a name remotely like 'snort-reporter'.
Found it. Debian's cron packaging leaves some things to be desired, but there's a script in /etc/cron.daily/5snort containing: (echo "To: $DEBIAN_SNORT_STATS_RCPT"; snort-stat -a -t $DEBIAN_SNORT_STATS_THRESHOLD < $LOGFILE) | sendmail -t (LOGFILE being defined as LOGFILE=/var/log/snort/alert) Apparently this file is never pruned. Could anybody tell me why? Dave ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort daily reports Dave Rutherford (Jan 03)
- <Possible follow-ups>
- Snort daily reports Dave Rutherford (Jan 04)
- Re: Snort daily reports Dave Rutherford (Jan 16)