Snort mailing list archives
Re: email notification scripts
From: Edin Dizdarevic <edin.dizdarevic () interActive-Systems de>
Date: Wed, 08 Jan 2003 00:28:16 +0100
Hi Ryan, why don't you log localy, let barnyard log to the database and logsurfer be your real time warning system? Do it IMHO the right way from the very begininng. Probably the best (performance) setup. No need for ugly DB-queries, no dropped packets at high load since Snort cannot analyze while logging (is this right?), no fear to loose alerts and Snort if MySQL is down... Enough reasons? ;) Ryan Ordway wrote:
I've recently moved from an alert logging based Snort system to a
[...]
unfortunately.... maybe something to use as an example? Thanks muchly, Ryan
Regards, Edin_ -- Edin Dizdarevic ------------------------------------------------------- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- email notification scripts Ryan Ordway (Jan 02)
- Snort2html.pl Mike Koponick (Jan 02)
- Re: email notification scripts Edin Dizdarevic (Jan 07)
- <Possible follow-ups>
- RE: email notification scripts larosa, vjay (Jan 03)
- RE: email notification scripts Ryan Ordway (Jan 03)
- RE: email notification scripts larosa, vjay (Jan 03)
- RE: email notification scripts larosa, vjay (Jan 03)
- RE: email notification scripts Mike Koponick (Jan 03)