RE: Veryifing snort

["R" <rr () conformix com>]

There is a test script at http://www.argusnetsec.com/downloads/ that generates alerts. I have checked it only on Linux 
and it works fine. Basically this script sends some ping packets that contain signature for a rule which is triggered 
to generate alerts. If your alerts are going to database, just ignore the last part of the script output which displays 
last lines from /var/log/snort/alerts and look into your database instead.





-----Original Message-----

From: snort-users-admin () lists sourceforge net [mailto:snort-users-admin () lists sourceforge net] On Behalf Of 
Andrea Iacopini

Sent: Tuesday, October 22, 2002 5:47 AM

To: Snort-users () lists sourceforge net

Subject: [Snort-users] Veryifing snort



Hi guys,

finally my snort/mysql seems to work properly.

Is there some tool or check that I can use to verify my configuration ? For example I'm interested to my db, how many 
rows snort writes, megabytes etc

Thanks,

A. ========================================================================

Andrea Iacopini - Networking Solutions andrea.iacopini () realtech it - Mobile + 39 335 123.44.93

REALTECH Italia S.p.A. - Technology drives e-Business

Via Paolo di Dono, 73 - 00142 Roma, Italy

Tel. +39 06 51.95.981, Fax. +39 06 51.96.36.74 ========================================================================

Real hackers don't die, just their TTL expires. [Unknown]







-------------------------------------------------------

This sf.net emial is sponsored by: Influence the future of 

Java(TM) technology. Join the Java Community Process(SM) (JCP(SM)) 

program now. http://ad.doubleclick.net/clk;4699841;7576301;v?

http://www.sun.com/javavote _______________________________________________

Snort-users mailing list

Snort-users () lists sourceforge net

Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users

Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users