Re: how do I stop snort logging to /var/log/snort and only the database?

["Andrew R. Baker" <andrewb () snort org>]

You are seeing this behaviour because you have not identified any packet
logging mechanisms in your configuration or commdanline, thus snort logs
packets using the default behaviour.  If you will add a packet logging
option to either the configuration file or the commandline, you will no
longer get all of the IP address directories in /var/log/snort.

-Andrew

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users