This is a discussion on [Snort-users] snort funtionallity within the Snort forums, part of the System Security and Security Related category; isnt there a way to have snort email you when a serious attack occurs? i thought i remembered reading that ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
isnt there a way to have snort email you when a serious attack occurs? i
thought i remembered reading that some where but cant find it now. also is ACID the best console for snort? or are they any better ones out there? and are there any websites with a list of rules to add to increase security of your snort install without having to write all the rules by hand yourself? and where would i add those rules? and finally this probably goes along with the previous question; i am getting virtually no ICMP (<1%) traffic and no portscan traffic (0%), i know there has to be some traffic for those, and i have a fresh install of snort running, is there something i have to add to get snort to look for that traffic? thanks for any and all help, im very new to snort and acid and need all the help i can get thanks nick ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://productguide.itmanagersjournal.com/ _______________________________________________ Snort-users mailing list Snort-users@lists.sourceforge.net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/...fo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.p...st=snort-users |