Snort mailing list archives

Re: RE: Snort not logging to the /var/log/snort/alert f ile


From: ids () san rr com
Date: Wed, 24 Mar 2004 11:39:30 -0800

Yes I did :( I know I could have recovered the deleted file but by the time I realized what I had done it was to late...


Alan

----- Original Message -----
From: "Miner, Jonathan W" <jonathan.w.miner () baesystems com>
Date: Wednesday, March 24, 2004 10:34 am
Subject: RE: [Snort-users] Snort not logging to the /var/log/snort/alert f      ile

Did you try to stop/restart snort?

If not, the original process is still writing data to the file 
that you
deleted. The disk blocks will not be freed until the file gets closed.

-----Original Message-----
From: ids () san rr com
To: snort-users () lists sourceforge net
Sent: 3/24/04 1:06 PM
Subject: [Snort-users] Snort not logging to the 
/var/log/snort/alert file

Hi-

I'm a goof and accidently deleted my /var/log/snort/alert file. 
After I
deleted I tried to recreate the file. I noticed that Snort no longer
writes alerts to this file. I've tried everything. Can anybody 
help me?
Thanks in advance!


Alan



-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: