Snort daily reports

["Dave Rutherford" <dave () evilpettingzoo com>]

On 1/3/07, info+lucretia.ca <info () lucretia ca> wrote:
> Snort daily reports?  What tool is this?
>
> Snort has no email or reporting functions.

That's a fair question; I've no idea.  As I said, I'm using the
Debian packages, and I don't have anything installed with
a name remotely like 'snort-reporter'.

I Do have installed:
   webmin-snort
   snort-doc
   snort
   snort-common
   snort-rules-default

I Don't have installed:
   airsnort
   snort-pgsql
   snort-mysql

Here are the full headers from one such recent message.
To me, they give no clue what tool generated it.

Return-path: <root () evilpettingzoo com>
Envelope-to: dave () evilpettingzoo com
Delivery-date: Wed, 03 Jan 2007 06:25:06 -0500
Received: from root by mongo with local (Exim 4.61)
    (envelope-from <root () evilpettingzoo com>)
    id 1H24Ev-00060p-M6
    for dave () evilpettingzoo com; Wed, 03 Jan 2007 06:25:06 -0500
To: dave () evilpettingzoo com
Subject: [SNORT] mongo daily report
Message-Id: <E1H24Ev-00060p-M6@mongo>
From: root <root () evilpettingzoo com>
Date: Wed, 03 Jan 2007 06:25:03 -0500
X-jf: 20020519, 1:1,2:1,3:1,4:1,ad:1,bo:1,di:1,do:1,he:1,ip:1,us:0

Anyone else using Snort with Debian?  These reports are so huge as to
be meaningless, but yet still take up valuable disk space.

Thanks,
    Dave

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users