Q

Use swatch to generate e-mail alerts in Snort

I currently have Snort installed on Slackware 9.1 using MySQL and Acid. I don't know of a way to have Acid automatically send alerts via e-mail. What is the best way to get this done?
ACID has limited e-mail functionality. The best and most flexible solution will be to use the "swatch" tool to generate e-mail upon certain alerts from Snort. Many sample configuration files for "swatch" are available on the Web (e.g. http://project.honeynet.org/papers/honeynet/swatchrc.txt).
This was last published in July 2004

Dig Deeper on Linux security tools

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

Start the conversation

Send me notifications when other members comment.

By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Please create a username to comment.

-ADS BY GOOGLE

SearchDataCenter

SearchServerVirtualization

SearchCloudComputing

SearchEnterpriseDesktop

Close