SNORT2DLF.IN(1) LogReport's Lire Documentation SNORT2DLF.IN(1)NAME
snort2dlf - convert Snort logs to firewall DLF
SYNOPSIS
snort2dlf
DESCRIPTION
snort2dlf converts Snort logs into firewall DLF format. Input for this converter is the standard snort logfile.
EXAMPLES
To process a log as produced by snort:
$ snort2dlf < snort.log
snort2dlf will be rarely used on its own, but is more likely called by lr_log2report:
$ lr_log2report snort < snort.log
SEE ALSO
The Snort project website at http://www.snort.org/ .
AUTHOR
Torsten Fellhauer <torsten@fellhauer-web.de> . Code based upon ipchains2dlf code by Francis J. Lacoste.
VERSION
$Id: snort2dlf.in,v 1.7 2006/07/23 13:16:35 vanbaal Exp $
COPYRIGHT
Copyright (C) 2003 Torsten Fellhauer
This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 2 of the License, or (at your option) any later version.
This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License along with this program (see COPYING); if not, check with
http://www.gnu.org/copyleft/gpl.html.
Lire 2.1.1 2006-07-23 SNORT2DLF.IN(1)
Check Out this Related Man Page
SYSLOG2DLF.IN(1) LogReport's Lire Documentation SYSLOG2DLF.IN(1)NAME
syslog2dlf - convert syslog log files to DLF
SYNOPSIS
syslog2dlf
DESCRIPTION
This script uses the Lire::Syslog module to create a DLF representation of the syslog log files. It can process all the syslog log formats
supported by that module.
EXAMPLES
To process a log as produced by syslog:
$ syslog2dlf < syslog.log
syslog2dlf will be rarely used on its own, but is more likely called by lr_log2report:
$ lr_log2report syslog < /var/log/syslog.log
SEE ALSO Lire::Syslog(3pm)VERSION
$Id: syslog2dlf.in,v 1.6 2006/07/23 13:16:36 vanbaal Exp $
AUTHOR
Francis J. Lacoste <flacoste@logreport.org>
COPYRIGHT
Copyright (C) 2002 Stichting LogReport Foundation LogReport@LogReport.org
This program is part of Lire.
Lire is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free
Software Foundation; either version 2 of the License, or (at your option) any later version.
This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License along with this program (see COPYING); if not, check with
http://www.gnu.org/copyleft/gpl.html.
Lire 2.1.1 2006-07-23 SYSLOG2DLF.IN(1)
i'm following the, "How to setup and secure Snort, MySQL and Acid on FreeBSD 4.6 Release" off of the snort.org website.
in the documentation it says snort should be installed through the following:
-----
make -DWITH_MYSQL -DWITH_FLEXRESP ; make install
-----
later it says to do the... (13 Replies)
Im trying to gather some info to set up snort on openbsd 3.2, has anyone out there managed to get it up and running ? My initial attempts seem to be quite below par (4 Replies)
Hi all,
I have a out.log file
CARR|02/26/2006 10:58:30.107|CDxAcct=1405157051
CARR|02/26/2006 11:11:30.107|CDxAcct=1405157051
CARR|02/26/2006 11:18:30.107|CDxAcct=7659579782
CARR|02/26/2006 11:28:30.107|CDxAcct=9534922327
CARR|02/26/2006 11:38:30.107|CDxAcct=9534922327
CARR|02/26/2006... (3 Replies)
Ok, since i am scripting first-timer i want to apology in advance if any of my ideas are way off.
What i am trying to achieve is a script that can listen for alerts from snort. When snort triggers an alert then i want my script to do nothing for X seconds, and after that period of time i want... (3 Replies)
Use and complete the template provided. The entire template must be completed. If you don't, your post may be deleted!
1. The problem statement, all variables and given/known data:
My system is Redhat 5.6. I want to install snort in my system which requires following dependencies.
1. Libpcap... (8 Replies)
I've been trying to get Snort running on my lab network, but haven't been having much luck.
I installed Snort 2.9.14 on both Windows 10 & Ubuntu 18.04 (Running in VirtualBox 5.2.22). I seems to have the snort.conf file set up correctly in both environments, because when I test snort in either... (1 Reply)