Snort mailing list archives

Logging to dual hosts..


From: "Marc Hering" <mhering () reval com>
Date: Mon, 21 Mar 2005 10:44:31 -0500

Hey guys
I currently have snort set to log to Mysql as well as Syslog.  I am
having a problem getting Syslog to redirect itt's local3.* to both a
remote syslog host as well as the local logfile.
 
I have the following entry in my syslog.conf
 
local3.*                                                @1.2.3.4
 
If I try
local3.*
@1.2.3.4,/var/log/snort/snort.log
it only writes to the @1.2.3.4 address (Please note that all IP
addresses have been changed to protect the innocent :) )
 
According to the man pages and documentation for syslog this should
work.....what am I missing here? 
 
Thanks!
<M>

Current thread: