generates statistic of scans detected by
|cat /var/log/auth.log |
is a small script that generates a nice
statistic on the port scans that were detected by snort and reported via
/var/log/snort/alert . The output of this script is mailed to the user
confgured in the /etc/snort/snort.debian.conf configuration file. The cron
script /etc/cron.daily/5snort uses this script.
The script is mostly based on the snort-stat from Yen-Ming Chen
<chenym+@CMU.EDU>. The hostname resolving, the big shrinkage and this
manpage were done by Christian Hammers <email@example.com>.