Snort.org home  
Got Source? About Snort About Sourcefire Snort FAQ
Sourcefire Network Security - the creators of Snort

Snort Forums Archive

Archive Home » Windows » Snort output to Cisco MARS

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

Snort output to Cisco MARS


Posted by Captaintrps on February 01, 2007 06:41:19

Hi everyone,

I'm trying to get Snort to log to a syslog facility and have that forwarded to a Cisco MARS. I understand how to do this in say FreeBSD, but not windows.

In FreeBSD I would set snort's output to syslog and set my syslog.conf to forward to MARS.

How can I do the equivalent in Windows? I don't have the option of sending to snort output to a UNIX or Linux box.

Thanks
Bob