Re: logging directory "/var/log/snort"

["Corey Rock" <snort_sigs () hotmail com>]

Indeed, that helps sgt_b!

was running as root....dir didn't exist....but, alas, I thought all logging 
is configured via the output plugins, and given that I chose mysql as the 
logging db instead of to a dir, I thought I shouldn't have to create it?

Where is that default call to /var/log/snort made from?  I don't see it in 
the conf file...perhaps I'm missing it?

thanks!

Corey

> From: sgt_b <sgt_b () security-forums com>
So you can either
> create that directory, or use the -l switch to specify another logging 
> location. (ie `snort -v -T -c /etc/snort/snort.conf -l ./' to log to the 
> current directory or `snort -v -T -c /etc/snort/snort.conf -l 
> /path/to/logging/directory' to log to a directory of your choosing.

_________________________________________________________________
Is your PC infected? Get a FREE online computer virus scan from McAfee® 
Security. http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963



-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE. 
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users