RE: SMB pluging

["Paul D. Shaffer" <paulshaf () earthlink net>]

output alert_smb: /etc/snort/smb

..in snort.conf works, assuming a host (to be alerted) list in
/etc/snort/smb (or wherever file/name you like).  Also, snort needs to
be configure'd' --with-smbalerts

Paul


-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of César
Augusto Rojas Sierra
Sent: Wednesday, February 12, 2003 8:27 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] SMB pluging

Good Morning:

I already install  snort 1.9.0 on a WIN 2000 box, it's working so well 
and it's logging the alarmas to a Mysql DB so fine. Now i'm trying to 
configure de alert_smb pluging, but when I run snort it shows this
message:

WARNING: unknown output plugin: 'alert_smb'1274 Snort rules read...

Do you know how I can setup this plugin on Win 2000?


thanks

-- 
CENTRAL DE AYUDAS TECNOLÓGICAS CAT-ETB
Dirección de Soporte Operativo - Vicepresidencia de Informática ETB
Proyecto NIDS-GNU







-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld =omething 2 See!
http://www.vasoftware.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=ort-users



-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users