RE: Output Plugin - log_ascii

["Hicks, John" <JHicks () JUSTICE GC CA>]

Interestingly enough, I can impliment it OK in my Snort 2.0 tests on Win32,
but using 1.9 it fails :(
John

-----Original Message-----
From: L. Christopher Luther [mailto:CLuther () Xybernaut com]
Sent: Tuesday, December 03, 2002 11:49 AM
To: Snort-Users (E-mail)
Subject: [Snort-users] Output Plugin - log_ascii
Sensitivity: Confidential




-----BEGIN PGP SIGNED MESSAGE----- 
Hash: SHA1 

In previous posts regarding logging output, it was noted by some that 
Snort apparently has an undocumented output plugin called 
"log_ascii", which is the default logging facility if none other is 
specified.  And supposedly one can add the option "output log_ascii" 
to the snort.conf file to re-enable the ASCII logging facility along 
side other logging facilities (e.g., output database: log, ...).  

However, when I specify this plugin in my snort.conf file, both Snort 
1.8.6 and 1.8.7 return the following warning when started:  

    *WARNING*: unknown output plugin "log_ascii", ignoring! 

Is this output plugin something new to Snort 1.9.x or something else? 
  


Sincerely,  

L. Christopher Luther  
Technical Consultant  
Xybernaut Solutions, Inc.  
(703) 654-3642  
cluther () xybernaut com  
http://www.xybernautsolutions.com <http://www.xybernautsolutions.com>   

My PGP Public Key:  
http://keyserver.pgp.com/pks/lookup?op=get
<http://keyserver.pgp.com/pks/lookup?op=get&search=0x21261B88>
&search=0x21261B88 

CONFIDENTIALITY NOTE:  This communication contains 
information that is confidential and/or legally privileged.  
This information is intended only for the use of the individual 
or entity named on this communication. If you are not the 
intended recipient, you are hereby notified that any disclosure, 
copying, distribution, printing or other use of, or any action 
in reliance on, the contents of this communication is strictly 
prohibited.  If you receive this communication in error, please 
immediately notify us by telephone at (703) 631-6925. 

- ------------------------------------------------------------ 
Unsolicited commercial e-mail will automatically be reported 
to the appropriate abuse@ - without exception. 
- ------------------------------------------------------------ 


-----BEGIN PGP SIGNATURE----- 
Version: PGP 7.1.2 

iQA/AwUBPezghau/XM0hJhuIEQKlKwCgsuf5Hk3yFe06F7C5woDnJDjxsdUAoPO3 
mjn1efHSUkqaqv6rOkOZ8nQP 
=SogO 
-----END PGP SIGNATURE-----