Snort mailing list archives

RE: Re: Log analysis without ACID


From: "Kreimendahl, Chad J" <Chad.Kreimendahl () umb com>
Date: Thu, 29 Apr 2004 10:16:07 -0500


There are a few options out there... I think Demarc is most well
known... The alternative is to store your logs in a database and create
your own reports. 

-----Original Message-----
From: Frank Barton [mailto:pauling () starwolf biz] 
Sent: Thursday, April 29, 2004 7:07 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Re: Log analysis without ACID

Personaly, I'm looking for a basic summary of
a)a basic list of there were N hits of type X (sorted by i) severity and

ii) number of occurances 
b)Number of Hits per IP address

Message: 1
Date: Tue, 27 Apr 2004 16:33:59 -0500
From: Michael Sconzo <msconzo () tamu edu>
To: Michael Steele <michaels () winsnort com>
Cc: snort-users () lists sourceforge net
Subject: Re: [Snort-users] Log analysis without ACID

On Tue, Apr 27, 2004 at 12:58:11PM -0700, Michael Steele wrote:
ACID does not generate report logs.

I have yet to find one. It would be nice to find one that can
generate
weekly, monthly and yearly reports from the Snort log.

What kind of information are you looking for in the report... ?


-=Mike



-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g.
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id149&alloc_id66&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: