RE: -N switch fails?

["Sheahan, Paul (PCLN-NW)" <Paul.Sheahan () priceline com>]

Yes, the data is being dumped into the directories. BTW this is version 1.7.
I have removed the -h option and will send the results to the list.

I appreciate the help!

Paul


-----Original Message-----
From: Martin Roesch
To: Sheahan, Paul (PCLN-NW)
Cc: Snort List (E-mail)
Sent: 6/14/01 3:32 PM
Subject: Re: [Snort-users] -N switch fails?

Is the data being dumped into the directories as well?  Try to stop
using the -h switch and see if that effects anything...

    -Marty

"Sheahan, Paul (PCLN-NW)" wrote:
> Hello,
>
> Has anyone experienced this? The -N switch on snort doesn't seem to be
> working unless there is something else I'm missing.
>
> Just to be sure.. I stopped snort, and restarted it with this script:
>
> #!/bin/bash
> /usr/sbin/snort -A full -c /etc/snort/snort.conf -h 12.23.56.78/24 -i
eth0
> -l /var/log/snort -D -N
>
> Yet, the directories for each offending IP address are being created
in
> /var/log/snort. I am trying to turn this off. Any ideas on what I
might be
> doing wrong?
>
> Thanks,
> Paul
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

--
Martin Roesch
roesch () sourcefire com
http://www.sourcefire.com - http://www.snort.org

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users