[prev in list] [next in list] [prev in thread] [next in thread] 

List:       snort-devel
Subject:    [Snort-devel] Snort-users] snort + swatch + script wirting +
From:       pearl carlo <pearlcarlo () yahoo ! com>
Date:       2007-06-07 0:27:12
Message-ID: 217979.81056.qm () web35103 ! mail ! mud ! yahoo ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


Hi all

I am using  Snort and would like to use swatch so that when particular attack occurs  \
swatch runs that script. 

I need little  advice here .. i want my script to parse out the IP addresses from the \
same alert which is triggered by rule..

Any descriptive ideas will be helpful or if somebody has ready script shall be \
helpful to me before i spend lots of time to reinvent the wheel.

thanks a lot in advance and hope to get good response.

pearl
       
---------------------------------
Ready for the edge of your seat? Check out tonight's top picks on Yahoo! TV. 


[Attachment #5 (text/html)]

Hi all<br><br>I am using&nbsp; Snort and would like to use swatch so that when \
particular attack occurs&nbsp; swatch runs that script. <br><br>I need little&nbsp; \
advice here .. i want my script to parse out the IP addresses from the same alert \
which is triggered by rule..<br><br>Any descriptive ideas will be helpful or if \
somebody has ready script shall be helpful to me before i spend lots of time to \
reinvent the wheel.<br><br>thanks a lot in advance and hope to get good \
response.<br><br>pearl<p>&#32;  <hr size=1>Ready for the edge of your seat? 
<a href="http://us.rd.yahoo.com/evt=48220/*http://tv.yahoo.com/">Check out tonight's \
top picks</a> on Yahoo! TV. 



-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/

_______________________________________________
Snort-devel mailing list
Snort-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-devel


[prev in list] [next in list] [prev in thread] [next in thread]