RE: Clean up/Reset Logs

["Michael Steele" <michaels () silicondefense com>]

Florian,

Did you stop Snort prior to renaming the files?

Snort will create the files if they are absent. Try stopping snort then
move the files out then restart Snort.

 -Michael

 Michael Steele | System Engineer / Support Technician
 mailto:michaels () silicondefense com
 Silicon Defense: IDS solutions - http://www.silicondefense.com
 Snort: Open Source Network IDS - http://www.snort.org


-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of Florian
Huber
Sent: Sunday, November 03, 2002 10:13 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Clean up/Reset Logs

Hi,
can anyone tell me how to clean up/reset the snort logs ind
/var/log/snort/*?
I tried to rename the alert and the portscan.log file and create new
empty
ones,
but snort wrote to the renamed files (alert.old).
Is there a good solution? or do i have to remove the whole directory?

 TIA
    Florian Huber




-------------------------------------------------------
This SF.net email is sponsored by: ApacheCon, November 18-21 in
Las Vegas (supported by COMDEX), the only Apache event to be
fully supported by the ASF. http://www.apachecon.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users





-------------------------------------------------------
This SF.net email is sponsored by: ApacheCon, November 18-21 in
Las Vegas (supported by COMDEX), the only Apache event to be
fully supported by the ASF. http://www.apachecon.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users