RE: Snort does not handle alert file being turned over.

[Ian Macdonald <secsnort () dirk demon co uk>]

Does that work when logging in tcpdump format as well?

thanks

On Sun, 18 Aug 2002, Robert D Hughes wrote:

> You need to instruct newsyslog to send a HUP to snort. man newsyslog for more detailed information.
>
>       -----Original Message-----
>       From: SW [mailto:samwun () onebb net]
>       Sent: Sun 8/18/2002 2:51 AM
>       To: snort-users () lists sourceforge net
>       Cc:
>       Subject: [Snort-users] Snort does not handle alert file being turned over.
>
>
>
>       Hi,
>
>       I don't know whether this is truth or not. Snort 1.8 doesn't handle the alert file being turned over.
>       The file is modied by newsyslogd.
>
>       Is there another way to turn over the aler file? or I can still use newsyslogd to turn over the snort alert 
> file?
>
>       Thanks
>       Sam
>
>       N??????????uH????j???u?????????y???????????????
>
> ???????????????????????????????????????????+,??????X???'???u??9 ??8?y???????W\zYi????g?jw????~??DA???i????
> ??za?x???&??????????????}?{?}?????????????????????????????????????Jz+???z?&j)b?       
> b???????????b??????q??????F??-?+D?hr????z?)?*'?????????m????l?????l??.??????w??X??????b????z+???z????????b???r?{?m????
> 0??r?????r????b????i??b??????



-------------------------------------------------------
This sf.net email is sponsored by: OSDN - Tired of that same old
cell phone?  Get a new here for FREE!
https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users