syslog-ng can do this if the programs log anything interesting, and I
sent Michael a copy of a program I wrote to batch alerts before mailing
them (as not to kill the mta if there is a bunch of hits). If you
really want real-time, just write a program that emails each line as it
is read from stdin
On Thu, 2004-08-26 at 10:24, Tim Kelley wrote:
> On Thu, Aug 26, 2004 at 08:14:50AM +1000, Michael Bellears wrote:
>
> > No - He wants to be notified immediately if an FTP or SSH connection is
> > established.
>
> Using snort and tailing the logfile, it doesn't get much more real
> time than that
On Thu, Aug 26, 2004 at 08:14:50AM +1000, Michael Bellears wrote:
> No - He wants to be notified immediately if an FTP or SSH connection is
> established.
Using snort and tailing the logfile, it doesn't get much more real
time than that. Just modify the config files to treat all accesses as
aler
> Hi Michael,
> by 'realtime', do you mean :
> 1) an email sent to him every hour?
No - He wants to be notified immediately if an FTP or SSH connection is
established.
The Server will have a Firewall in front of it, that will only allow
certain IP's to FTP + SSH - Therefore the only FTP + SSH con
On Wed, Aug 25, 2004 at 02:32:08PM +1000, Michael Bellears wrote:
> We have a client who is wanting real-time notifications of FTP/SSH
> connections to there WebServer - Could this be achieved with a
> TCPWrappers script for those two services? Or is there a utility
> available that can do this?
>
On Wed, 25 Aug 2004, Michael Bellears wrote:
> We have a client who is wanting real-time notifications of FTP/SSH
> connections to there WebServer - Could this be achieved with a
> TCPWrappers script for those two services? Or is there a utility
> available that can do this?
>
> They will have
6 matches
Mail list logo
