I am not asking how to alert from snort.

But rather, if anyone has setup alerting (pager, for example) from snort,
how did you go about determining what you wanted to be alerted on?

My management has asked a couple of times, and I have (somewhat
insubordinately) said absolutely not due to the sheer number of alerts that
are logged by snort.

If there is anyone that has done this, I would be very interested in hearing
from you.

Tom Sevy
EPX, Inc.

_______________________________________________________________

Have big pipes? SourceForge.net is looking for download mirrors. We supply
the hardware. You get the recognition. Email Us: bandwidthsourceforge.net
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]