Snort mailing list archives

Re: alert_unixsock

From: Erek Adams <erek () snort org>
Date: Thu, 16 Oct 2003 19:13:37 -0400 (EDT)

On Thu, 16 Oct 2003, [iso-8859-1] Nic¤ wrote:

Is it possible to get a snort rule example with the
alert_unixsock used please ?


It's not a per rule item.  All alerts go to a UNIX based socket, and can
be picked up from another program via that socket.

Cheers!

-----
Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson


-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net hosts over 70,000 Open Source Projects.
See the people who have HELPED US provide better services:
Click here: http://sourceforge.net/supporters.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread:

alert_unixsock William Morris (Oct 02)
- <Possible follow-ups>
- alert_unixsock Nic¤ (Oct 16)
  - Re: alert_unixsock Erek Adams (Oct 16)
    - Re: alert_unixsock Frank Knobbe (Oct 16)
    - Re: alert_unixsock Erek Adams (Oct 22)