Snort mailing list archives
RE: Have snort execute a command when matching a rule?
From: "Mike Koponick" <mike () redhawk info>
Date: Wed, 5 Mar 2003 12:33:26 -0800
Rich, Take a look at SWATCH... it will do what you want. Mike -----Original Message----- From: snort-users-admin () lists sourceforge net [mailto:snort-users-admin () lists sourceforge net]On Behalf Of Richard Compton Sent: Wednesday, March 05, 2003 12:02 PM To: snort-users () lists sourceforge net Subject: [Snort-users] Have snort execute a command when matching a rule? I want to have snort execute a script when it matches a rule. Is there any way to do this. I briefly looked over the docs and didn't see this as an option. Do I just need to RTFM a bit closer? If it doesn't have this ability, why not? Thanks, Rich Compton ------------------------------------------------------- This SF.net email is sponsored by: Etnus, makers of TotalView, The debugger for complex code. Debugging C/C++ programs can leave you feeling lost and disoriented. TotalView can help you find your way. Available on major UNIX and Linux platforms. Try it free. www.etnus.com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users ------------------------------------------------------- This SF.net email is sponsored by: Etnus, makers of TotalView, The debugger for complex code. Debugging C/C++ programs can leave you feeling lost and disoriented. TotalView can help you find your way. Available on major UNIX and Linux platforms. Try it free. www.etnus.com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Have snort execute a command when matching a rule? Richard Compton (Mar 05)
- RE: Have snort execute a command when matching a rule? Mike Koponick (Mar 05)
- Re: Have snort execute a command when matching a rule? Matt Kettler (Mar 05)