Administrator's Guide

Automated Response

Sample Response Programs

Appendix B

196

Forwarding Information

Sending an E-mail HP-UX HIDS logs alerts to a ﬁle on the local system and sends the

alert information to the HP-UX HIDS System Manager. Alert information can also be

sent via e-mail, as demonstrated in this script.

#!/usr/bin/sh

# Sample HP-UX HIDS alert response script

# Send an email to root if a severity 1 alert is received

# Replace this with the target email address

RECIPIENT=”root”

# If we have a severity 1 alert then send the details in email

if[$3=“1”]

then

echo “$8” | /usr/bin/mailx -s “$7” ${RECIPIENT}