[JDEV] integration with Snort?

Dave dave at dave.tj
Tue Apr 23 21:25:08 CDT 2002


Uh, okay ... I guess. . .

/me's too worn out to argue about this, too :-(

 - Dave


Justin Kirby wrote:
> 
> You should not have snort do anything like that, it only slows it
> down... the only thing snort should do is dump data to a file via the
> unified alert...
> 
> Barnyard is what should be doing all the alerting/logging ... and its
> trivial to write plugins for it...
> 
> 
> 
> On Wed, 2002-04-17 at 19:55, Dave wrote:
> > If Snort will do email, you can just use an SMTP-t to convert the
> > resulting email to a Jabber message.
> > 
> > Just my 2 cents,
> > Dave Cohen <dave at dave.tj>
> > 
> > 
> > Thomas Muldowney wrote:
> > > 
> > > I started to once, but I didn't have enough time to devote to it (Hah me
> > > run out of time?!). It shouldn't be that hard.
> > > 
> > > --temas
> > > 
> > > 
> > > On Mon, 2002-04-15 at 10:41, Peter Saint-Andre wrote:
> > > > Has anyone worked on integrating Jabber alerts into Snort (the open-source
> > > > intrusion detection system)?
> > > > 
> > > > Peter
> > > > 
> > > > --
> > > > Peter Saint-Andre
> > > > email+jabber: stpeter at jabber.org
> > > > weblog: http://www.saint-andre.com/blog/
> > > > 
> > > > _______________________________________________
> > > > jdev mailing list
> > > > jdev at jabber.org
> > > > http://mailman.jabber.org/listinfo/jdev
> > > 
> > > 
> > > _______________________________________________
> > > jdev mailing list
> > > jdev at jabber.org
> > > http://mailman.jabber.org/listinfo/jdev
> > > 
> > 
> > _______________________________________________
> > jdev mailing list
> > jdev at jabber.org
> > http://mailman.jabber.org/listinfo/jdev
> 
> 
> _______________________________________________
> jdev mailing list
> jdev at jabber.org
> http://mailman.jabber.org/listinfo/jdev
> 




More information about the JDev mailing list