Snort mailing list archives
Re: Doubt about rules
From: Erek Adams <erek () theadamsfamily net>
Date: Thu, 28 Feb 2002 03:49:33 -0800 (PST)
On Thu, 28 Feb 2002, koriun@ipia wrote: *sigh*
1. Is there any snort log analiser?
http://www.snort.org/downloads.html
2. How can I log all alert msg to specified file ?? instead of /var/adm/messages
RTFM. It's all in there...
From the man page....
[...snip...] -l log-dir Set the output logging directory to log-dir. All plain text alerts and packet logs go into this directory. If this option is not specified, the default logging directory is set to /var/log/snort. [...snip...] Cheers! ----- Erek Adams Nifty-Type-Guy TheAdamsFamily.Net _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Doubt about rules Sonika Malhotra (Feb 28)
- Re: Doubt about rules Erek Adams (Feb 28)
- Re: Doubt about rules koriun@ipia (Feb 28)
- Re[2]: Doubt about rules koriun@ipia (Feb 28)
- Re: Doubt about rules Erek Adams (Feb 28)
- <Possible follow-ups>
- RE: Re[2]: Doubt about rules Ronneil Camara (Feb 28)