NAME¶

snort-stat — generates statistic of scans detected by snort

SYNOPSIS¶

cat /var/log/auth.log | /usr/sbin/snort-stat

DESCRIPTION¶

snort-stat is a small script that generates a nice statistic on the port scans that were detected by snort and reported via /var/log/snort/alert.log. The output of this script is mailed to a user that is setup in /etc/snort/snort.debian.conf. The cron script /etc/cron.daily/5snort uses this script.

SEE ALSO¶

snort(8)

AUTHORS¶

The script is mostly based on the snort-stat from Yen-Ming Chen <chenym+@CMU.EDU>. The hostname resolving, the big shrinkage and this manpage were done by Christian Hammers <ch@debian.org>.