Wierd error with snort-stat.pl.

[Erek Adams <erek () theadamsfamily net>]

Anyone out there seeing any issues with snort-stat.pl?  I'm unable to pass it
a full alert file and have it process it correctly.

When I send it the full alert file, all I get is headers for the breakdowns,
and a listing of IP's who triggered spp_portscan.  Nothing else.  No dates,
no times, no IP's, no stats...  Nothing.

Here's a snippet....

[erek@merf]~#cat alert | ./ss.pl
Subject: snort daily report

The log begins from:   ::
The log ends     at:   ::
Total events: 0
Signatures recorded: 0
Source IP recorded: 0
Destination IP recorded: 0
Portscan recorded: 7

[...snip...]

Nothing else other than the 7 portscans listed at the end....

Anyone have any ideas on this?

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users