Q

Use swatch to generate e-mail alerts in Snort

I currently have Snort installed on Slackware 9.1 using MySQL and Acid. I don't know of a way to have Acid automatically send alerts via e-mail. What is the best way to get this done?
ACID has limited e-mail functionality. The best and most flexible solution will be to use the "swatch" tool to generate e-mail upon certain alerts from Snort. Many sample configuration files for "swatch" are available on the Web (e.g. http://project.honeynet.org/papers/honeynet/swatchrc.txt).
This was first published in July 2004

Dig deeper on Linux security tools

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

0 comments

Oldest 

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

-ADS BY GOOGLE

SearchDataCenter

SearchServerVirtualization

SearchCloudComputing

SearchEnterpriseDesktop

Close