Re: Snort Logging

[Saad Kadhi <bsdguy () docisland org>]

On Thu, 2002-01-24 at 23:17, g00ru wrote:
> Hello I am new to snort and just set up snort and also the database
> logging portion of it, and set my output plugin to log to mysql. My
> question is does snort just log to mysql, or does it log to mysql and
> the default log directory?
it depends on your snort.conf. If you have only one line starting w/
output then it logs only to mysql. It will log portscans to the log
directory you specified if you have sth like:
preprocessor portscan: $HOME_NET 4 3 portscan.log


-- 
/Saad --  [bsdguy () docisland org] 
[pgp keyid: 35592A6D http://pgp.mit.edu]
# buy a geek-in-a-can, point nozzle at technical problem and spray
# if desesperate degauss your screen. it might solve your pb as well


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users