Snort.org home  
Got Source? About Snort About Sourcefire Snort FAQ
Sourcefire Network Security - the creators of Snort

Snort Forums Archive

Archive Home » Snort Development » about alert snort

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

about alert snort


Posted by sousana on October 17, 2005 05:05:50

I whould like to generate a messge box for the user when one alerte is signaled and he can select the action whish he prefert, for exemple: to interrupt the connection or reconfigure the firewall in ordre to drop the futur paquets from the suspect host... I can't detect where I must change in the source of snort? some one can help me

Posted by Joel_Esler on October 21, 2005 08:03:24

You can't do that with Snort natively. There is nothing for you to change. I suggest you check out
something like SnortSAM.

Joel Esler
SOURCEfire