Help needed with logs

[Peggy Kam <ppkam () n-dsi com>]

Hi,

I am running snort-2.0.4 on RH9.  I would like to know how the alerts 
are logged to the log file?  ie. during the ID process, are the alerts 
being temporary stored in a buffer and then output all the alerts at 
once in a file or are they being written to a file every single time an 
alert is triggered by the packet?  The reason why I am asking is that I 
would like to know if I am able to move the logs to another log file 
when the default log file reaches its size limitation.

Thanks in advance,
Peggy



-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users