Hallo Leute,

die Logdateien von 'snort' sind voll mit Portscans und irgendwelchen 
Dummen Versuchen auf meinem Router reinzukommen, aber snort schickt 
mir immer nur eine leere Message...

Wo muß ich daran drehen das er auch die Sttistik mitschickt und nicht 
nur eine leere Template ?

Grüße
Michelle


----- Forwarded message from root <[EMAIL PROTECTED]> -----

Date: Sun, 25 Jan 2004 00:00:10 +0100
Envelope-to: [EMAIL PROTECTED]
From: root <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]

Subject: [SNORT] adsl.michelle-is.com
 daily report

The log begins from:   ::
The log ends     at:   ::
Total events: 0
Signatures recorded: 0
Source IP recorded: 0
Destination IP recorded: 0


The number of attacks from same host to same
destination using same method
=========================================================================
  # of
 attacks  from              to                method
=========================================================================


Percentage and number of attacks from a host to a
destination
============================================================
        #  of
  %    attacks   from              to                
============================================================


Percentage and number of attacks from one host to any
with same method
==============================================================
        #  of
  %    attacks   from              method
==============================================================


Percentage and number of attacks to one certain host 
=================================================================
        #  of
  %    attacks   to                method
=================================================================


The distribution of attack methods
===============================================
        #  of
  %    attacks   method
===============================================

----- End forwarded message -----

-- 
Registered Linux-User #280138 with the Linux Counter, http://counter.li.org/ 


-- 
Haeufig gestellte Fragen und Antworten (FAQ): 
http://www.de.debian.org/debian-user-german-FAQ/

Zum AUSTRAGEN schicken Sie eine Mail an [EMAIL PROTECTED]
mit dem Subject "unsubscribe". Probleme? Mail an [EMAIL PROTECTED] (engl)

Antwort per Email an