Snort mailing list archives
SMB alerts
From: "Scott Elgram" <SElgram () verifpoint com>
Date: Fri, 13 Aug 2004 13:54:59 -0700
Hello,
I am having a bit of trouble getting SMB alerts to work. I have compiled snort-2.1.3
"--with-mysql=/usr/local/mysql --enable-smbalerts". And I added this to the ruleset containing the rules I want to be
alerted for.
ruletype smb_db_alert {
type alert
output alert_msb: workstation.list
output database: log, mysql, user=<dbuser> password=<password> dbname=snort host=localhost encoding=hex detail=Full
}
However, After all that when I start snort i get;
ERROR: unknown output plugin: 'alert_smb'Fatal Error, Quitting
Any help would be appreciated greatly.
Thanks
-Scott
Current thread:
- SMB alerts Scott Elgram (Aug 13)
- <Possible follow-ups>
- RE: SMB alerts Joshua Berry (Aug 13)
- Re: SMB alerts Scott Elgram (Aug 13)
- Re: SMB alerts Jason Haar (Aug 13)
- Re: SMB alerts Frank Knobbe (Aug 13)
- Re: SMB alerts Jason Haar (Aug 13)
- Re: SMB alerts Scott Elgram (Aug 13)
- Re: SMB alerts Martin Roesch (Aug 16)
