Snort mailing list archives
stopping snort
From: "Don" <Don () WeberOnTheWeb com>
Date: Fri, 13 Dec 2002 10:54:14 -0800
Has anyone found a way to stop snort, automatically, what i want to do is have snort stop, if it gets more than 'x' alerts in a single hour, or some time frame, then of course email me that it has stopped. i do go to syslog with alerts. any suggestions. I have a particular sensor that periodically starts alerting on something, that just causes a round robin effect, and fills up the logs with the same error over and over and over, it gets really boring actually. 'if' i can open the log. the logs have became as large as 2gig on occasion. Don ------------------------------------------------------- This sf.net email is sponsored by: With Great Power, Comes Great Responsibility Learn to use your power at OSDN's High Performance Computing Channel http://hpc.devchannel.org/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- stopping snort Don (Dec 13)
- Re: stopping snort Erick Mechler (Dec 13)
- Re: stopping snort Bennett Todd (Dec 13)
- Re: stopping snort Alberto Gonzalez (Dec 13)