Snort mailing list archives
HOW DOES ONE STOP an alert file from being Produced?
From: "Jacob, Raymond A Jr" <raymond.jacob () navy mil>
Date: Tue, 7 Mar 2006 16:18:48 -0500
I know this is an old question. However, I could not find the answer. I am sending alerts a mysql database so I don't need the alert file. What has been done in the past, was to periodically delete the alertfile. I thought there was a switch or a config statement I could use. I tried config alertfile: /dev/null. Stopped snort. Restarted snort. The alertfile is still generated. Thank you, Raymond
Current thread:
- HOW DOES ONE STOP an alert file from being Produced? Jacob, Raymond A Jr (Mar 07)
- Re: HOW DOES ONE STOP an alert file from being Produced? Martin Roesch (Mar 08)
- Re: HOW DOES ONE STOP an alert file from being Produced? Dirk Geschke (Mar 09)
- Re: HOW DOES ONE STOP an alert file from being Produced? Dirk Geschke (Mar 09)
- Re: HOW DOES ONE STOP an alert file from being Produced? Martin Roesch (Mar 09)
- Re: HOW DOES ONE STOP an alert file from being Produced? Dirk Geschke (Mar 09)
- <Possible follow-ups>
- RE: HOW DOES ONE STOP an alert file from being Produced? Jacob, Raymond A Jr (Mar 07)
- Re: HOW DOES ONE STOP an alert file from being Produced? Dirk Geschke (Mar 08)
- Re: HOW DOES ONE STOP an alert file from being Produced? Martin Roesch (Mar 08)