logs

[Ben Beeson]

Dave,

	I have te following in my crontab....  Enjoy...


# DO NOT EDIT THIS FILE - edit the master and reinstall.
# (/tmp/kcrontab.12851 installed on Thu May 31 22:53:20 2001)
# (Cron version -- $Id: crontab.c,v 2.13 1994/01/17 03:20:37 vixie Exp $)
# various entries via e-mail to root.
13      */6     *       *       *       /usr/local/etc/logcheck.sh      > /dev/console 2>&1
# Run the snortlog perl script to scan /var/log/messages for snort entries and send them to ben...
30      15      *       *       *       /usr/src/redhat/SOURCES/snortlog /var/log/messages VALinux 2>&1| /bin/mail -s "Snortlog results" ben
# Run the snortlog perl script to scan /var/log/secure for snort entries and send them to ben...
45      15      *       *       *       /usr/src/redhat/SOURCES/snortlog /var/log/secure VALinux 2>&1| /bin/mail -s "Snortlog results" ben# Run snort-stat on /var/log/secure and send results to ben
17      0-23/4  *       *       *       /usr/src/redhat/SOURCES/snort-stat /var/log/secure 2>&1 | /bin/mail -s "Snort Stats " ben  

Good luck,

Ben 



On Tue, 05 Jun 2001, you wrote:
> 
> Is there a way (script, some other means) to have logs emailed every so
> often (cron job perhaps?) and also an email sent when a connect, telnet,
> ssh, ftp etc is made or attempted?
>  
>  
> -Dave
> 
> 
> ---
> You are currently subscribed to luau as: beesond001 at hawaii.rr.com
> To unsubscribe send a blank email to $subst('Email.Unsub')
> 

----------------------------------------
Content-Type: text/html; name="unnamed"
Content-Transfer-Encoding: quoted-printable
Content-Description: 
----------------------------------------

--