Snort alerting with Swatch?

ladyath · 09-05-2004, 12:32 PM

Hi
I have set up Swatch to watch for snort alerts
(eg watchfor /Priority/)
But then Swatch only mails me the one line of a 6-line alert. What I want is for it to mail me all six lines. How can I do that?

Any other suggestions on working with Snort and real-time mail alerts would also be much appreciated.

Thanks!

linux_terror · 09-08-2004, 04:22 AM

For everything snort you should check out this site---> http://internetsecurityguru.com/
These guys/gals are kings/queens among snorters and there have great tutorials to get you going using snort/acid/mysql and other methods.

Happy snorting,
linux_terror