Snort mailing list archives
i use /etc/iinit.d/snort start but...
From: soldier Mx <soldi3rmx () yahoo com mx>
Date: Thu, 22 Jan 2004 01:55:51 -0600 (CST)
What optios are enable in that moment... cuz i just see alerts, and doesnt log the payload that matched it.. So.. what i wanna know when i do. /etc/init.d/snort start. with what options run snort as a daemon, how i showed above. ... what i like to do, if somebody gets some passwd or something that i want to trigger an alert, i want to see the payload also.. to do that i have to use session or tag doesnt it ?.. Or with what option do i do that ?.. always when i reboot the system, snort get start as a daemon, but i dont know with what options does.. well is confusing, im mexican, heh Thanks for all!! _________________________________________________________ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com ------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- i use /etc/iinit.d/snort start but... soldier Mx (Jan 22)