Re: reviewing httpd access log

["L. V. Lammert" <lvl@omnitec.net>]

On Sun, 1 Aug 2004, marius wrote:

> On Sun, 1 Aug 2004 12:42:34 -0500, J Moore <jaymo@cullmail.com> wrote:
> >
> > Is there a good technique for automatically identifying these
> > trouble-makers? I'd like to be able to build a "deny" table for pf to
> > halt repeat offendors, but I can't afford the time to review the logs
> > "manually".
> >
>
> Check out Snort... http://www.snort.org/
>
Unfortunately, snort does not communicate with pf. If anyone HAS done this
sort of setup, please let everyone know.

	Lee

================================================
  Leland V. Lammert            lvl@omnitec.net
    Chief Scientist     Omnitec Corporation
 Network/Internet Consultants   www.omnitec.net
================================================