carta
snort-stat(8)

snort-stat8

Generates statistic of scans detected by snort

Usage

cat {/var/log/auth.log | /usr/sbin/snort-stat}

Overview

snort-stat is a small script that generates a nice statistic on the port scans that were detected by snort and reported via /var/log/snort/alert . The output of this script is mailed to the user confgured in the /etc/snort/snort.debian.conf configuration file. The cron script /etc/cron.daily/5snort uses this script.

History

  • Debian 10 (Buster) to Debian 9 (Stretch): the text shown here
  • Debian 7 (Wheezy) to Debian 3.1 (Sarge)
  • Debian 3.0 (Woody)
  • Debian 2.2 (Potato)

Authors

The script is mostly based on the snort-stat from Yen-Ming Chen <[email protected]>. The hostname resolving, the big shrinkage and this manpage were done by Christian Hammers <[email protected]>.

From snort-common 2.9.7.0-5 in Debian 10 (Buster). Parsed by carta from the page's mdoc source.