Re: [OT] Firing off Abuse email based on Snort Traffic

["james" <hackerwacker () tarpit cybermesa com>]

I think securityfocus or incidents.org allow you to up load your snort
files and then select  who gets an abuse e-mail. With thousands of alerts a day
it just became too much to deal with, as many alerts do not deserve an e-mail.

Snort Snarf has a XML function that allows you to view the alerts and send e-mails right
from the web page. Have not played with this one yet. 

Key here is that human intervention and decisions need to be made before e-mails are sent.

james


-------------------------------------------------------
This SF.net email is sponsored by: eBay
Get office equipment for less on eBay!
http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users