Snort mailing list archives
Rotate barnyard files?
From: ausec () athabascau ca
Date: Tue, 09 Sep 2003 13:58:10 -0600 (MDT)
I'm running two barnyards to process alerts and logs. From my snort.conf: output alert_unified: filename snort.alert, limit 128 output log_unified: filename snort.log, limit 128 My snort log directory is filling up with files like these (ie. there are multiple snort.alert.* and snort.log.* files): snort.alert.1063135489 snort.log.1063135489 Does that mean barnyard is getting behind processing the log and alert files? Should I be rotating or deleting them? How do I know when barnyard is done with a file...? Thanks, Ausec. __ This communication is intended for the use of the recipient to whom it is addressed, and may contain confidential, personal, and or privileged information. Please contact us immediately if you are not the intended recipient of this communication, and do not copy, distribute, or take action relying on it. Any communications received in error, or subsequent reply, should be deleted or destroyed. --- ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Red Hat 9 Falvo, Jose Luis - (Arg) (Sep 09)
- Rotate barnyard files? ausec (Sep 09)
- Re: Red Hat 9 Andy Cuff [talisker] (Sep 10)
- Starting Barnyard w/SQL out and no SQL server? Gordon Cunningham (Sep 10)
- <Possible follow-ups>
- RE: Red Hat 9 Chip Upsal (Sep 09)