Snort mailing list archives
Re: snort -T output
From: "Alex Butcher, ISC/ISYS" <Alex.Butcher () bristol ac uk>
Date: Mon, 25 Oct 2004 15:06:25 +0100
--On 25 October 2004 07:25 -0600 hallian hallian <hallian () hotmail com> wrote:
When I update my rules I run snort -T to verify all my rules are GOOD. But there is no way for me to automate this process so that I can read the ERROR message to STDOUT to a file. If the snort -T does return ERROR then I want to reverse back to old rules. HOw can I feedin the output from snort -T or snort -c /etc/snort/snort.conf -v to STD OUTPUT to a file.
What do you need to do with the output from Snort, that can't be done by checking the return code:
snort >snort.out 2>&1 -T -c /etc/snort/snort.conf if [ $? -eq 0 ]; then echo "rules OK" ... else echo "rules broken" cat <snort.out ... fi
Any ideas.... thanks hallian
Best Regards, Alex. -- Alex Butcher: Security & Integrity, Personal Computer Systems Group Information Systems and Computing GPG Key ID: F9B27DC9 GPG Fingerprint: D62A DD83 A0B8 D174 49C4 2849 832D 6C72 F9B2 7DC9 ------------------------------------------------------- This SF.net email is sponsored by: IT Product Guide on ITManagersJournal Use IT products in your business? Tell us what you think of them. Give us Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more http://productguide.itmanagersjournal.com/guidepromo.tmpl _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- snort -T output hallian hallian (Oct 25)
- Re: snort -T output Alex Butcher, ISC/ISYS (Oct 25)
- <Possible follow-ups>
- RE: snort -T output Shawn Kottke (Oct 25)
- Re: snort -T output hallian hallian (Oct 25)