[PLUG] next snort task

[Ron Kaye Jr <rekaye1005@verizon.net>]

i am finally up and snorting away.
base engine with graphing is working fine.

1) i am finding alerts i am not interested in,
for example ...

MISC UPnP malformed advertisement

VOIP-SIP outbound 401 Unauthorized message protocol-command-decode

VOIP-SIP inbound 401 Unauthorized message protocol-command-decode

i want to filter them out.

not sure how- wouldnt know which rule file generated these messages, and if i did, how to do it.

2) i would like the alerts to go to my email.

i am a complete rookie here.

heard of sendmail, received a vague reference to postfix, but have no clue.

then have to send to an smtp relay server somewhere i'm guessin

Ron Kaye Jr
914-7294734
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug