RE: Weird question

[Erek Adams <erek () snort org>]

On Tue, 5 Aug 2003 support () nps-dc org wrote:

> Erek wrote: "...I'd suggest begging, borrowing, or stealing more disk space
> and running double logging.  One to DB, one to pcap..."
>
> Is this achieved with options/switches to just one instance of snort (like
> something I can put into my snort.conf file) or would I need to run 2
> instances of snort?

It depends on how you accomplish it.  You can do it with two instances and
two different snort.conf files, or you could use one instance and just
enable two logging methods within the snort.conf.

Cheers!

-----
Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson


-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users