Snort mailing list archives
Re: Logging to Remote syslog server
From: Rich Adamson <radamson () routers com>
Date: Sun, 31 Mar 2002 19:33:11 -0600
Terry, Yes it can. Check out the -s command line option. It's something like -s 192.168.1.1 which sends syslog alerts to that IP address. You can specify a port different than the default udp514 as well. Might also check the man pages to see what Facility and Priority is used as default values. Rich ------------------------
Just trying to find a way to log to a remote syslog server WITHOUT using the local syslog
server as a forward.... Can this even be done? I haven't found and info on this becides logging to the local syslog server and then having that write to the remote server...
Any help would be great.... Thanx.
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Logging to Remote syslog server Terry Magee (Mar 31)
- Re: Logging to Remote syslog server Rich Adamson (Mar 31)
- <Possible follow-ups>
- RE: Logging to Remote syslog server Madziarczyk, Jonathan (Mar 31)