Snort mailing list archives

Re: How to configure snort service to send snmp alerts?


From: Ted Kaczmarek <tedkaz () optonline net>
Date: Tue, 01 Mar 2005 07:41:52 -0500

On Wed, 2005-02-23 at 12:08 +0100, Jose Maria Lopez Hernandez wrote:
El mié, 23-02-2005 a las 11:48 +0200, Juan Fernandez escribió:
 
 
Hi,
 
 I want to configure the sensors to send a snmp trap when snort
service goes down.
 
or send to me an Email
 
Is it possible to to that?
 
 
thanks very much.

If you just want an email to be sent you can use
Nagios to monitor the process and send you a email when
the process it's not running.

But if you need SNMP then you have to configure a
SNMP agent in the machine and some kind of script
that checks the running process or the logs and
tell the agent to send a SNMP trap when it detects
the snort process death.

Regards.

With OpenNMS I just create a poller to check it via the 
ucdavis.procTable. This is not snort specific and can be used to monitor
anything.
On a service down event you can trigger any action you like, email, sms,
pager shell script etc.

Ted




-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_ide95&alloc_id396&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: