Re: [Snort-users] Snort deamon mode packet drop's statistic

Hi Thomas,

> I'm using snort (RH) with MySQL/ACID and didn't use the syslog. Is it
> possible to send/query the snort statistic via SNMP or as HTML output
> (periodical)?

I implemented one possibility to dump the statistics
on a periodical basis to an unix socket. A perl script
(or somesthing else) is able to read these information
and feed them in a RRD database. This is part of the
Fast Logging Project - FLoP. You can find it at

http://www.geschke-online.de/FLoP

For the statistics take a look at:

http://www.geschke-online.de/doc/c89.html#AEN104

But the RRD database is still kept on the sensor...

Best regards

Dirk
--
+-------------------------------------------------------------+
| Dr. Dirk Geschke | E-mail: geschke@genua.de |
| Gesellschaft fuer Netzwerk | Tel. : +49-(0)-89-991950-131 |
| und Unix Administration mbH | Fax : +49-(0)-89-991950-999 |
| 85551 Kirchheim / Germany | Domagkstrasse 7 |
+-------------------------------------------------------------+




-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills. Sign up for IBM's
Free Linux Tutorials. Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users