Snort actually dumps the raw packet details into log files in the /var/log/snort directory... These can be open'd using Ethereal and you are able to take a closer look at the packets themselves with relative ease... Respectfully, Jeremy T. Bouse dude was said to been seen saying: > > Is there any way to get snort to send more than > daily reports from snort? > > I've looked and cant fidn the answer. > > Thanks, > > G > -- ,-----------------------------------------------------------------------------, |Jeremy T. Bouse, CCNA - UnderGrid Network Services, LLC - www.UnderGrid.net | | Public PGP/GPG fingerprint and location in headers of message | | If received unsigned (without requesting as such) DO NOT trust it! | | Jeremy.Bouse@UnderGrid.net - NIC Whois: JB5713 - jbouse@Debian.org | `-----------------------------------------------------------------------------'
Attachment:
pgpTwE7R2h99g.pgp
Description: PGP signature