[JDEV] integration with Snort?
Dave
dave at dave.tj
Tue Apr 23 21:25:08 CDT 2002
Uh, okay ... I guess. . .
/me's too worn out to argue about this, too :-(
- Dave
Justin Kirby wrote:
>
> You should not have snort do anything like that, it only slows it
> down... the only thing snort should do is dump data to a file via the
> unified alert...
>
> Barnyard is what should be doing all the alerting/logging ... and its
> trivial to write plugins for it...
>
>
>
> On Wed, 2002-04-17 at 19:55, Dave wrote:
> > If Snort will do email, you can just use an SMTP-t to convert the
> > resulting email to a Jabber message.
> >
> > Just my 2 cents,
> > Dave Cohen <dave at dave.tj>
> >
> >
> > Thomas Muldowney wrote:
> > >
> > > I started to once, but I didn't have enough time to devote to it (Hah me
> > > run out of time?!). It shouldn't be that hard.
> > >
> > > --temas
> > >
> > >
> > > On Mon, 2002-04-15 at 10:41, Peter Saint-Andre wrote:
> > > > Has anyone worked on integrating Jabber alerts into Snort (the open-source
> > > > intrusion detection system)?
> > > >
> > > > Peter
> > > >
> > > > --
> > > > Peter Saint-Andre
> > > > email+jabber: stpeter at jabber.org
> > > > weblog: http://www.saint-andre.com/blog/
> > > >
> > > > _______________________________________________
> > > > jdev mailing list
> > > > jdev at jabber.org
> > > > http://mailman.jabber.org/listinfo/jdev
> > >
> > >
> > > _______________________________________________
> > > jdev mailing list
> > > jdev at jabber.org
> > > http://mailman.jabber.org/listinfo/jdev
> > >
> >
> > _______________________________________________
> > jdev mailing list
> > jdev at jabber.org
> > http://mailman.jabber.org/listinfo/jdev
>
>
> _______________________________________________
> jdev mailing list
> jdev at jabber.org
> http://mailman.jabber.org/listinfo/jdev
>
More information about the JDev
mailing list