RE: How to Get Snort 1.8.1b4 to write to /var/log/secure

["Erik Norman" <erik.norman () ccnox com>]

I'm experiencing the same thing. I believe the docs says that on Linux
systems, such as mine, it should be /var/log/secure.

Can I configure it via the alert_syslog plugin?

Anyone?

/E

> -----Original Message-----
> From: snort-users-admin () lists sourceforge net
> [mailto:snort-users-admin () lists sourceforge net]On Behalf Of Jon Naumann
> Sent: den 26 juli 2001 14:50
> To: snort
> Subject: [Snort-users] How to Get Snort 1.8.1b4 to write to
> /var/log/secure
>
>
> Greetings,
>
> I have recently installed Snort 1.8.1Beta4 onto a RedHat 7.1 (Kernel
> 2.4.3-12) system.  I invoke snort with
>   # snort -A full -b -c snort.conf -i eth0 -s -D
>
> Snort is writing to /var/log/messages rather than /var/log/secure as it
> did under 1.7.
>
> Can anyone tell me how to get snort to write to /var/log/secure ?
>
> Thanks in advance,
>
> Jon Naumann
> Dynetics, Inc
> SANS GSEC-I
>
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users