On 1/3/07, info+lucretia.ca <info@lucretia.ca> wrote:
Snort daily reports? What tool is this?
Snort has no email or reporting functions.
That's a fair question; I've no idea. As I said, I'm using the
Debian packages, and I don't have anything installed with
a name remotely like 'snort-reporter'.
I Do have installed:
webmin-snort
snort-doc
snort
snort-common
snort-rules-default
I Don't have installed:
airsnort
snort-pgsql
snort-mysql
Here are the full headers from one such recent message.
To me, they give no clue what tool generated it.
Return-path: <root@evilpettingzoo.com>
Envelope-to: dave@evilpettingzoo.com
Delivery-date: Wed, 03 Jan 2007 06:25:06 -0500
Received: from root by mongo with local (Exim 4.61)
(envelope-from <root@evilpettingzoo.com>)
id 1H24Ev-00060p-M6
for dave@evilpettingzoo.com; Wed, 03 Jan 2007 06:25:06 -0500
To: dave@evilpettingzoo.com
Subject: [SNORT] mongo daily report
Message-Id: <E1H24Ev-00060p-M6@mongo>
From: root <root@evilpettingzoo.com>
Date: Wed, 03 Jan 2007 06:25:03 -0500
X-jf: 20020519, 1:1,2:1,3:1,4:1,ad:1,bo:1,di:1,do:1,he:1,ip:1,us:0
Anyone else using Snort with Debian? These reports are so huge as to
be meaningless, but yet still take up valuable disk space.
Thanks,
Dave
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
