What is the purpose of the program snort-stat?

Question

Options

• AIt displays statistics from the running Snort process.
• BIt returns the status of all configured network devices.
• CIt reports whether the Snort process is still running and processing packets.
• DIt displays the status of all Snort processes.
• EIt reads syslog files containing Snort information and generates port scan statistics.

• A
  3% (1)
• D
  6% (2)
• E
  91% (30)

Explanation

snort-stat is a Perl script that processes syslog files containing Snort-generated alerts and produces a summary of port scan statistics - making E correct. It works offline against log data, not by querying a live process, which rules out A (real-time stats from a running process), C (checking if Snort is actively running), and D (status of all Snort processes) - none of those involve log file parsing. Option B is simply unrelated to Snort entirely, describing a generic network device status tool.

Memory tip: Think of the name as "snort-statistics from logs" - it stats the logs, not the daemon. If a tool interacts with a live process, it usually has names like snortctl or uses a socket; snort-stat reads files passively.

No community discussion yet for this question.