Snort mailing list archives
real-time alerting and rule to monitor only specific traffic
From: Lena Okanovic <lokanovic () flightapps com>
Date: Tue, 24 Feb 2015 00:24:57 +0000
?Hello, How can I only monitor TCP traffic that is not on port 80 or 443 or on our DMZ IP address? And also, can someone please provide me with instructions on how to setup real-time (email) alerting in Snort on Windows server box. So, if 'bad' TCP traffic comes through, I would like to get an email right a way letting me know. Thank you, Lena Okanovic lokanovic () flightapps com<mailto:lokanovic () flightapps com>
------------------------------------------------------------------------------ Dive into the World of Parallel Programming The Go Parallel Website, sponsored by Intel and developed in partnership with Slashdot Media, is your hub for all things parallel software development, from weekly thought leadership blogs to news, videos, case studies, tutorials and more. Take a look and join the conversation now. http://goparallel.sourceforge.net/
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- real-time alerting and rule to monitor only specific traffic Lena Okanovic (Feb 23)
- Re: real-time alerting and rule to monitor only specific traffic Al Lewis (allewi) (Feb 23)
- Re: real-time alerting and rule to monitor only specific traffic Lena Okanovic (Feb 26)
- Re: real-time alerting and rule to monitor only specific traffic Al Lewis (allewi) (Feb 23)