Re: How to enable mail notication?

[Matt Kettler <mkettler () evi-inc com>]

from the snort FAQ:
-----------
5.7 --faq-- --snort-- --faq-- --snort-- --faq-- --snort-- --faq--

Q: How do I get snort to e-mail me alerts? A: Log to syslog and use swatch 
or logcheck.
-----------

See FAQ 5.9 for why doing computationally expensive things in the logging 
chain of snort creates security holes. (It is about invoking processes in 
the log chain, but I suspect doing a SMTP client in the log chain is pretty 
bad too, for the very same reasons.)


At 06:58 AM 1/23/2002 -0800, My Security wrote:
> Hi there!
>
> I would like to enable sending mail if there is alert
> on my email address.
>
> How will I be able to configure this option to the
> snort.conf.
>
> Thanks in advance.


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users