Snort mailing list archives

Re: SnortSAM + Snort 2.3.3


From: Xavier Cabrera <xavierc () devilcrack org>
Date: Wed, 04 May 2005 15:02:42 -0500

Thanks for your help...

Right now its working...

Regards

Xavier C

Frank Knobbe wrote:

On Mon, 2005-05-02 at 13:59 -0500, Xavier Cabrera wrote:
I have recently problems with Snort 2.3.3 and SnortSAM.
Snort can detect the attack but doesn't send the packet to SnortSAM machine.
Can anyone help me???

The answer is right here:

May  2 13:52:53 core snort: command line overrides rules file alert plugin!

Does your Snort command line include a "-A full" or "-A fast"? Any "-A"
in the command line will override any output plugin that is configured
in snort.conf (such as Snortsam). Remove the -A from the command line
and Snort should work just fine.

Regards,
Frank




-------------------------------------------------------
This SF.Net email is sponsored by: NEC IT Guy Games.
Get your fingers limbered up and give it your best shot. 4 great events, 4
opportunities to win big! Highest score wins.NEC IT Guy Games. Play to
win an NEC 61 plasma display. Visit http://www.necitguy.com/?r=20
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: