Snort mailing list archives

Classification.config file doubt.


From: "Sonika Malhotra" <sonikam () magnum barc ernet in>
Date: Thu, 15 Nov 2001 12:18:26 +0530

Hello List,
        I have installed snort1.8.1 on Linux-2.2.14.
 The classification.config file has different class-types and their  priorities.
 I want to know more in this direction.How do i define a class-type and  its priority,
 can i customize this, so that i am able to classify attacks in  high,medium,low categories.
 and also i want to b e-mailed if a high-priority risk attack is found.(i  donot need an e-mail for all low/medium 
risks).Any pointers?
 
regards:
 sm


Current thread: