Snort mailing list archives
Re: Always logging as binary!
From: "Joel Esler (jesler)" <jesler () cisco com>
Date: Fri, 22 Jan 2016 01:49:32 +0000
-b is the default. You have to specifically tell Snort to log in ascii. Check out -A Sent from my iPhone On Jan 21, 2016, at 8:46 PM, Jack Rief <jrief () bigkahunatech com<mailto:jrief () bigkahunatech com>> wrote: My snort installation has NEVER logged to ascii. It has always logged to the tcp_dump binary format. Even without the -b switch for logging! Where can I look to fix/debug this problem? We're sending our alerts to syslog and would like to do the same with the standard logs. But first we need to log in non-binary format! Jack Rief Senior Programmer Analyst Big Kahuna Technology ------------------------------------------------------------------------------ Site24x7 APM Insight: Get Deep Visibility into Application Performance APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month Monitor end-to-end web transactions and take corrective actions now Troubleshoot faster and improve end-user experience. Signup Now! http://pubads.g.doubleclick.net/gampad/clk?id=267308311&iu=/4140 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net<mailto:Snort-users () lists sourceforge net> Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
------------------------------------------------------------------------------ Site24x7 APM Insight: Get Deep Visibility into Application Performance APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month Monitor end-to-end web transactions and take corrective actions now Troubleshoot faster and improve end-user experience. Signup Now! http://pubads.g.doubleclick.net/gampad/clk?id=267308311&iu=/4140
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Always logging as binary! Jack Rief (Jan 21)
- Re: Always logging as binary! Joel Esler (jesler) (Jan 21)
- Re: Always logging as binary! Jack Rief (Jan 22)
- Re: Always logging as binary! wkitty42 (Jan 22)
- Re: Always logging as binary! Joel Esler (jesler) (Jan 22)
- Re: Always logging as binary! Jack Rief (Jan 22)
- Re: Always logging as binary! Joel Esler (jesler) (Jan 21)