Snort mailing list archives
Re: remote logging
From: Matt Kettler <mkettler () evi-inc com>
Date: Wed, 29 Oct 2003 14:47:43 -0500
At 01:42 PM 10/29/2003, you wrote:
Question:: is it posible to log to a remote directory or syslog....?
yes, snort supports syslog logging.. if you want to get to a remote syslog, then you need to configure your local syslog.conf to direct the particular log facility that snort is using to a remote server..
With syslog applications never specify where things get logged.. they merely specify a facility and level.. where it goes is entirely up to the configuration of syslog itself.
This is great because you can redirect output for all your apps that use syslog without having to reconfigure each and every app.. it's bad because you have to learn how to use syslog, but that's more-or-less unavoidable in unix systems.
------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- remote logging Majwabu, Richard (Oct 29)
- Message not available
- Re: remote logging Matt Kettler (Oct 29)
- Message not available