Snort mailing list archives

Re: remote logging


From: Matt Kettler <mkettler () evi-inc com>
Date: Wed, 29 Oct 2003 14:47:43 -0500

At 01:42 PM 10/29/2003, you wrote:
Question:: is it posible to log  to a remote directory or syslog....?

yes, snort supports syslog logging.. if you want to get to a remote syslog, then you need to configure your local syslog.conf to direct the particular log facility that snort is using to a remote server..

With syslog applications never specify where things get logged.. they merely specify a facility and level.. where it goes is entirely up to the configuration of syslog itself.

This is great because you can redirect output for all your apps that use syslog without having to reconfigure each and every app.. it's bad because you have to learn how to use syslog, but that's more-or-less unavoidable in unix systems.





-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: