Snort mailing list archives

Filesize limit exceeded


From: krista l merrill <kmerr001 () cs fiu edu>
Date: Tue, 30 Apr 2002 11:59:30 -0400 (EDT)


I'm running snort while logging to a mysql database (ACID):

output database: alert, mysql, user=user password=pass dbname=snort
host=localhost

I changed the 'alert' from 'log' to get portscan data, and now I'm getting
Filesie limit exceeeded errors from the size of my /var/log/snort
directory.  Is there a way to montinor portscans from ACID without logging
to /var/log/snort?

I'm running Linux 2.4.17.

Thank you.
Hopefully someday, I'll be answering more questions rather than asking
them.

-Kris


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: