Snort mailing list archives

Re: Lost in the config file


From: "K. A. Steensma" <keith () airways-consulting com>
Date: Wed, 26 Jun 2002 23:06:30 -0500



John Sage wrote:
On Wed, Jun 26, 2002 at 08:56:31PM -0500, K. A. Steensma wrote:

This is a very small portion of a old message -

-s xxx.xxx.xxx.xxx:xxx
*** This works properly ***


I'm afraid that I depended on someone elses message -
-----Original Message-----
From: Michael Steele [mailto:michaels () silicondefense com]
Sent: Thursday, June 20, 2002 9:25 AM
To: dlpassport () s2access com
Subject: RE: [Snort-users] Problems logging to syslog and mysql simultaneously

DL,
We are working on this problem.

1. You can log to local Syslog?
*** Only when using -s ***

Using what method?

1. output alert_syslog: LOG_AUTH LOG_ALERT
   output alert_full
 *** This doesn't log at all ***

2. -s xxx.xxx.xxx.xxx:xxx
*** This works properly ***

3. Item 2 is local or remote?
*** When using a -s, this works locally and remotely ***
-----Original Message-----

What I really want to do is to log everything to a machine behind the main firewall and inside the protected LAN, but I don't find a method to do it.



-------------------------------------------------------
This sf.net email is sponsored by: Jabber Inc.
Don't miss the IM event of the season | Special offer for OSDN members! JabberConf 2002, Aug. 20-22, Keystone, CO http://www.jabberconf.com/osdn
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: