roeschhiverworld.com

• Next message: Mullen, Patrick: "RE: [snort] Back home...."
• Previous message: Martin Roesch: "Re: [snort] Livelock with "nocase""
• In reply to: Andrew R. Baker: "[snort] New snort tool"
• Reply: Martin Roesch: "Re: [snort] New snort tool"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Thanks Andrew, I'll make an attempt to take a look at this
today/tonight! (I like that this handles the -A output, no one has
really done that yet)

    -Marty

"Andrew R. Baker" wrote:
>
> Attached is a perl script that reads a snort alert file and creates a
> sorted html page of the different types of alerts.
> Note: this is intended for files created from the "-A fast" option,
> if it is desired I can make it read syslog alerts too
>

-- 
Martin Roesch                      <roeschhiverworld.com>
Director of Forensic Systems     http://www.hiverworld.com
Hiverworld, Inc.               Enterprise Network Security
Network Forensics, Intrusion Detection and Risk Assessment

• Next message: Mullen, Patrick: "RE: [snort] Back home...."
• Previous message: Martin Roesch: "Re: [snort] Livelock with "nocase""
• In reply to: Andrew R. Baker: "[snort] New snort tool"
• Reply: Martin Roesch: "Re: [snort] New snort tool"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]