Snort-rep is a reporting software for Snort that generates both text and HTML output from a syslog file.
If you're looking for a Snort reporting tool, you might want to consider snort-rep. It's capable of producing either text or HTML output from a syslog file. One of its biggest selling points is the fact that its reports contain a portscan summary, alert summary by ID, alert summary by remote host and ID, alert summary by local host and ID, as well as an alert summary by local port and ID.
What's even better is that it's designed to be used for daily e-mail reports to system administrators. For an example, check out snort-rep-mail. Perhaps most impressively, the HTML output contains direct links to the IDS descriptions of whitehats.com.
If you're looking for specifics on what's new in the latest release, it's version 1.10. The release fixed an off-by-one hour error in syslog parsing when changing from daylight saving time, and added support for portscan2 (Snort 1.9.0).
What's even better is that it's designed to be used for daily e-mail reports to system administrators. For an example, check out snort-rep-mail. Perhaps most impressively, the HTML output contains direct links to the IDS descriptions of whitehats.com.
If you're looking for specifics on what's new in the latest release, it's version 1.10. The release fixed an off-by-one hour error in syslog parsing when changing from daylight saving time, and added support for portscan2 (Snort 1.9.0).
What's New
Version 1.10: N/A