Snort mailing list archives

Re: snort paging


From: Mike_Sands () elementk com
Date: Wed, 27 Mar 2002 07:42:47 -0500


You can also use a tool like demarc (www.demarc.org) to send off email
alerts so you are all set as long as your pager is capable of receiving
email pages.

Mike Sands
Security / Network Engineer
Element K
'the knowledge catalyst'
www.elementk.com

"Even paranoids have enemies" - unknown



                                                                                                            
                    Scott Nursten                                                                           
                    <scottn () s2s ltd uk>                  To:     Jon Ottar Runde <jorunde () broadpark no>,    
                    Sent by:                             <snort-users () lists sourceforge net>                
                    snort-users-admin@lists.sourc        cc:                                                
                    eforge.net                                                                              
                                                         Subject:     Re: [Snort-users] snort paging        
                                                                                                            
                    03/27/2002 03:31 AM                                                                     
                                                                                                            
                                                                                                            




Of course, you could just use grep & any generic paging software hooked up
to a modem. ;)

Regards,

Scott

On 26/3/02 10:49 pm, "Jon Ottar Runde" <jorunde () broadpark no> wrote:

On ty , 2002-03-26 at 21:55, quylow () attglobal net wrote:
Has any one ever tried setting up a snort box so that it can page the
admin for priority one alerts.  I am about to try to do this and am open
to any ideas anyone may have.  Thanks in advance

Bob Y

I do belive bigbrother (http://bb4.com/) has a "plugin" to the
monitoring-software, that supports snort.
bb can then in turn page you, and will also give status on a web-page..

If you don't want it all, -you could at least "borrow" code, as it is
mostly shell-scripts

jon O


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


--



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users





_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: