Re: alert_syslog

[Peggy Kam <ppkam () n-dsi com>]

I actually tried that before, it did not work for the switch command.  
Does anyone have  any other ideas on how to change the syslog file?

Thanks again,
Peggy

Josh Berry wrote:

> You can configure your syslog.conf file with:
>
> auth.alert       /var/log/(whatever_you_want_to_call_the_file)
>
> and then restart syslog.  I am not sure if this works with the command
> line switch but it works if you use the syslog configuration in your
> snort.conf file.
>
>  
>
> > Hi,
> >
> > Does anyone know how to sends alerts to some other file other than to
> > the default syslog file (when using the -s switch command line)?
> >
> > Thanks in advance,
> > Peggy
> >
> >
> >
> > -------------------------------------------------------
> > The SF.Net email is sponsored by EclipseCon 2004
> > Premiere Conference on Open Tools Development and Integration
> > See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
> > http://www.eclipsecon.org/osdn
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users
> >
> >    
>
>
> Thanks,
> Josh Berry, CISSP
> CTO, VP of Product Development
> LinkNet-Solutions
> 469-831-8543
> josh.berry () linknet-solutions com
>
>
>
> -------------------------------------------------------
> The SF.Net email is sponsored by EclipseCon 2004
> Premiere Conference on Open Tools Development and Integration
> See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
> http://www.eclipsecon.org/osdn
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>  



-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users