Re: Snort Statistics on Shutdown

[Martin Roesch <roesch () sourcefire com>]

Hi Bill,

I just checked the code and the DropStats() function is calling 
LogMessage() to output its info so they should be somewhere in your 
syslog files.  You aren't reading a pcap file in daemon mode, are you?

     -Marty

On Aug 4, 2004, at 11:59 PM, Bill Parker wrote:

> Ok, now that I have the pig at version 2.1.3, I was curious about 
> another thing.  I run snort in daemon mode and
> start/stop it with the init script provided (no problems at all), but 
> I was under the impression that snort when it
> shuts down, should generate some stats as to how many packets were 
> processed, etc.  I see the snort startup
> in /var/log/messages, should I not see stuff in there when it shuts 
> down?
>  
> Bill
--
Martin Roesch - Founder/CTO, Sourcefire Inc. - (410)290-1616
Sourcefire: Intelligent Security Monitoring
roesch () sourcefire com - http://www.sourcefire.com
Snort: Open Source Network IDS - http://www.snort.org



-------------------------------------------------------
This SF.Net email is sponsored by OSTG. Have you noticed the changes on
Linux.com, ITManagersJournal and NewsForge in the past few weeks? Now,
one more big change to announce. We are now OSTG- Open Source Technology
Group. Come see the changes on the new OSTG site. www.ostg.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users