Snort mailing list archives
Re: How to disable /var/log/snort/alert?
From: Nick Moore <nmoore () sourcefire com>
Date: Tue, 23 Mar 2010 16:09:58 -0500
Fabio, If you use the unified output and then use Barnyard2 to process it, commenting out all other outputs, I think you'll have better performance. Nick 2010/3/23 Fábio Ferrão <ferrao04 () gmail com>
Dears, How do I disable the alerts in /var/log/snort/alert? My server is slow when snort_inline is initiated. I intend to disable /var/log/snort/alert for to stop the writing in hard disk and to verify if my server will be faster. Thanks. -- Fábio Ferrão "E conhecereis a verdade e a verdade vos libertará". João 8.32 "And you will know the truth and the truth you will free". John 8.32 ------------------------------------------------------------------------------ Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
-- Nick Moore, SFCE, CISSP, CISA Sr. Systems Engineer Voice 708-336-9041 Email nick.moore () sourcefire com IM nickgmoore (Yahoo) nickgmoore38 (AIM) ,,_ o" )~ Sourcefire - The Creators of Snort '''' www.sourcefire.com www.snort.org
------------------------------------------------------------------------------ Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- How to disable /var/log/snort/alert? Fábio Ferrão (Mar 23)
- Re: How to disable /var/log/snort/alert? Nick Moore (Mar 23)