LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 08-08-2006, 03:18 AM   #1
dwarf007
Member
 
Registered: Sep 2004
Location: Malaysia
Posts: 181

Rep: Reputation: 30
snort log with SID


Is anyone knows how to generate Snort alert file with sid output? This is because I can refer to the SID and look for a solution and info detail of the attack in the doc library.

Anyone knows, plaease help
Thank you.....
 
Old 08-08-2006, 03:40 PM   #2
bmeckle
Member
 
Registered: Jun 2004
Posts: 60

Rep: Reputation: 15
The SID should be in the alert it's self. It is laid out in a manner that might be confusing but it should look something like this.

[**] [1:2050:9] MS-SQL version overflow attempt [**]
blah, blah, blah

The SID is "2050".

Hope that helps.
 
Old 08-10-2006, 02:50 AM   #3
dwarf007
Member
 
Registered: Sep 2004
Location: Malaysia
Posts: 181

Original Poster
Rep: Reputation: 30
Thanks man, u r the best
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Snort don't want log to mysql lcat Slackware 1 03-07-2005 08:20 AM
I can't get snort to log anything abefroman Linux - Security 2 09-07-2004 10:09 AM
SNort&log JuBeC Linux - Security 1 05-04-2004 10:33 PM
Snort log messages Mike_the_Man Linux - Security 2 04-23-2004 11:47 AM
Snort is not log chamkila Linux - Security 19 06-18-2003 03:30 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 03:51 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration