snort-stat(8)

snort-stat8

Generates statistic of scans detected by snort

Usage

cat {/var/log/auth.log | /usr/sbin/snort-stat}

Overview

snort-stat is a small script that generates a nice statistic on the port scans that were detected by snort and reported via /var/log/snort/alert . The output of this script is mailed to the user confgured in the /etc/snort/snort.debian.conf configuration file. The cron script /etc/cron.daily/5snort uses this script.

Releases

9 releases since Debian 2.2 (Potato); the text changed 3 times.

  1. 2.2
  2. 3.0
  3. 3.1–7
  4. 9–10

Authors

The script is mostly based on the snort-stat from Yen-Ming Chen <[email protected]>. The hostname resolving, the big shrinkage and this manpage were done by Christian Hammers <[email protected]>.

From snort-common 2.9.7.0-5 in Debian 10 (Buster). Parsed by carta from the page's mdoc source.