Snort mailing list archives

Re: Removing Snort Alert Files


From: Joel Esler <jesler () sourcefire com>
Date: Wed, 26 Aug 2009 11:25:29 -0400


On Aug 26, 2009, at 10:51 AM, Richard Lichvar wrote:

As some of you have seen from others of my posts, we have a large number of zero-length Snort alert files (apparently because the systems being protected are so isolated ). What is the advisability of removing these alert files? We have literally hundreds of them. Is there a particular process that should be used or will a simple rm be okay?


RM works really well for this.  :)


--
Joel Esler | Sourcefire | AIM: eslerjoel | 302-223-5974
[m]

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: