Friday, September 01, 2006

Idea - Alert! On Snort


i'm searching via google and i found this picture is kinda interest...

this is a screenshot taken from SAM (Snort Alert Monitor) website at here





How can SAM alert me that my thresholds have been crossed?
SAM has many ways of grabbing your attention. The first is the rather large stop light in the top left corner of the screen. The second is by playing a specific sound when a particuliar threshold is reached. Currently we are using HAL quotes, but you are welcome to change them to anything you like. They are rather obviously labeled in the sam/wav directory. The third way you can be notified is that an email can be sent to a specific person or group of persons. And lastly a plugin architecture is being planned where you can create your own creative way of alerting the appropriate people.




another tool that i found is Snort alert verification now on v0.9.6 from it project download page.