Snort mailing list archives
RE: Changing the filename format for alerts
From: Erek Adams <erek () theadamsfamily net>
Date: Tue, 15 Oct 2002 13:27:52 -0700 (PDT)
On Tue, 15 Oct 2002, Matt Yackley wrote:
Snort and SnortSnarf, one for each side of the firewall. I run a weeks worth of data then tar the whole html tree that snortsnarf creates and ftp it to a windows machine. Once on the windows box the whole tree get burned to a CD for storage so all I need to do is drop the CD in any PC and navigate through the HTML just like it was on the server.
Hrm... Ok, I don't use snortsnarf, so this might be a silly question: Since 'the html tree that snortsnarf creates' is built by it, isn't that what's really giving you the issues with the filenames? I'm not sure, so I had to ask. :)
Anyway that's my messed up way of viewing and archiving data, but it works for me. I ran into all kinds of issues between Snort and SnortSnarf and trying to use : and then try the renaming route, etc., but the best way for me is to just use _ instead.
Naaa.... It's not messed up. I'd say it might be quite a bit more common that you think.
Your suggestion may work well for others though, thanks again for the help.
:) Well there is a way to do it. I'm just not sure where you'd need to edit the code at yet. I'll grunge thru it later on and see if I can come up with something.
BTW, I'm forced to use Outlook and I love seeing your Outlook flag!
;-) It's simple yet effective. Besides, I hate virus propagation programs that try to pretend to be an email client. ----- Erek Adams Nifty-Type-Guy TheAdamsFamily.Net ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Changing the filename format for alerts McKim, Tim (Oct 15)
- <Possible follow-ups>
- RE: Changing the filename format for alerts Matt Yackley (Oct 15)
- RE: Changing the filename format for alerts Erek Adams (Oct 15)
- RE: Changing the filename format for alerts Matt Yackley (Oct 15)
- RE: Changing the filename format for alerts Erek Adams (Oct 15)
- RE: Changing the filename format for alerts Matt Yackley (Oct 15)