Snort mailing list archives
snort email notification based on type of alert
From: Matt Chabot <mchabot () tier1net com>
Date: Thu, 2 Jan 2003 15:11:18 -0500
I just put Snort 1.9 into production with IDS center 1.09 on a Windows 2000 SP3 server and I am receiving hundreds of e-mail alert notifications an hour from the IDS center. I was wondering if there was a way to limit the email alerts based on the type of alert that is logged. For example, I do not want to be notified of AIM logins, but I would like to be notified of IIS intrusions. Thanks in advance for the help. Matt Chabot Tier1Net.com <http://www.tier1net.com/> 781.246.0300
Current thread:
- snort email notification based on type of alert Matt Chabot (Jan 02)