Mostafa, It sounds as if your question may pertain to Bro.
You may want to pose this question to the Bro mailing list, as this is the OSSEC mailing list. http://mailman.icsi.berkeley.edu/mailman/listinfo/bro Thanks, Wes On Thursday, May 5, 2016 at 10:32:40 AM UTC-4, mostafa ammar wrote: > > Dear All, > > I am new to bro ids , I installed successfully bro ids , and added a tap > to network to it , and for example if I accessed a website on a machine I > can see in http.log the website I accessed and if the wqebsite is ssl i can > see in ssl.lot and x509.log the certificate info > > my question is : > > I want when I ping i see a notification for this ping (I tried and could > not find) > > can I use signatures like snort with bro that generate logs when receiving > an attack and generate log with signature ID > > Please provide reply with some details as I am new to bro. > > Thanks > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
