RE: [Snort-users] Send alerts to a remote host

This is a discussion on RE: [Snort-users] Send alerts to a remote host within the Snort forums, part of the System Security and Security Related category; The only problem with using syslog is that if the same event happens more than once in a short time, ...


Go Back   Usenet Forums > System Security and Security Related > Snort

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 09-26-2003
Scott Williams
 
Posts: n/a
Default RE: [Snort-users] Send alerts to a remote host

The only problem with using syslog is that if the same event happens
more than once in a short time, you will only get a single message and a
"last message repeated X times" message.

-----Original Message-----
From: Muenz, Michael [mailto:linux@leute.server.de]=20
Sent: Thursday, September 25, 2003 9:04 AM
To: ??????? ????????; snort-users@lists.sourceforge.net
Subject: Re: [Snort-users] Send alerts to a remote host


Hi,

> Hello!!!
>
> I want that may packet filter with Snort will send all logs and alerts


> to

a remote host .How can I do
> that,


you can do that with syslog.
# man syslog.conf

- Michael



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf _______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...=3Dsnort-users


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 08:01 AM.


Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0