Re: logging in snort

[Matt Kettler <mkettler () evi-inc com>]

At 02:00 PM 1/31/2005, Peggy Kam wrote:
> Does it mean I can only have my log stored locally?

No.

There's no reason that syslog has to be logged locally, you can redirect 
any messages to another syslog server in syslog.conf.

(This is a built-in feature of syslog, *anything* logged to syslog can be 
forwarded to other syslog servers.)

If you're using SQL logging, well, that can easily be another machine. 



-------------------------------------------------------
This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
Tool for open source databases. Create drag-&-drop reports. Save time
by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
Download a FREE copy at http://www.intelliview.com/go/osdn_nl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users