Re: Fwd: unsock option

[Hui Cao <hcao () sourcefire com>]

-A unsock should work on snort. You will need a socket server to get data.

This link might provide you some details:

http://comments.gmane.org/gmane.comp.security.ids.snort.general/30159

Best,
Hui.

On Fri, Oct 25, 2013 at 3:26 PM, Mary <kimhee () gmail com> wrote:
> Hi.  I have snort installed on SecurityOnion Ubuntu 12.04.  I want to add
> the unsock option to send the data to a unix socket (-A unsock).  I read
> through the README, but I am not clear how to make this happen.
>
> Thanks,
>
> Mary
>
>
> ------------------------------------------------------------------------------
> Android is increasing in popularity, but the open development platform that
> developers love is also attractive to malware creators. Download this white
> paper to learn more about secure code signing practices that can help keep
> Android apps secure.
> http://pubads.g.doubleclick.net/gampad/clk?id=65839951&iu=/4140/ostg.clktrk
> _______________________________________________
> Snort-devel mailing list
> Snort-devel () lists sourceforge net
> https://lists.sourceforge.net/lists/listinfo/snort-devel
> Archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel
>
> Please visit http://blog.snort.org for the latest news about Snort!

------------------------------------------------------------------------------
Android is increasing in popularity, but the open development platform that
developers love is also attractive to malware creators. Download this white
paper to learn more about secure code signing practices that can help keep
Android apps secure.
http://pubads.g.doubleclick.net/gampad/clk?id=65839951&iu=/4140/ostg.clktrk
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!