Snort mailing list archives

RE: Logging specific alerts to syslog


From: "Jeff Dell" <jdell () activeworx com>
Date: Thu, 20 May 2004 11:08:42 -0400

If you create a custom rule action and assign the rules that you want to
that action, you can perform this very easily.

Checkout the following link:

http://www.snort.org/docs/snort_manual/node11.html

Cheers,
Jeff 

-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of Devanathan,
Balaji (Corporate, consultant)
Sent: Thursday, May 20, 2004 10:40 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Logging specific alerts to syslog

Hi All,

  I need snort to send only specific alerts to the syslog server..Is it
possible to check to the snort  log against a shell script before sending to
the syslog or is there anyother way for doing this.

cheers
Devanathan.B


-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest
thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id149&alloc_id66&op=ick
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=ort-users




-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g.
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id149&alloc_id66&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: