Snort mailing list archives

sfPortscan logfilein 2.9.0


From: John Forristel <john () build com>
Date: Tue, 19 Oct 2010 06:39:48 -0700

I'm having an issue where sfPortscan sends the portscan logs to the
/var/log/snort/alert file and not to the designated /var/log/snort/ps.log
file.  I can't figure out why this is happening.
Here is the snippet of sfportscan code:

preprocessor sfportscan: proto  { all } \
       scan_type { all } \
       memcap { 10000000 } \
       sense_level { medium } \
       logfile { /var/log/snort/ps.log }
------------------------------------------------------------------------------
Download new Adobe(R) Flash(R) Builder(TM) 4
The new Adobe(R) Flex(R) 4 and Flash(R) Builder(TM) 4 (formerly 
Flex(R) Builder(TM)) enable the development of rich applications that run
across multiple browsers and platforms. Download your free trials today!
http://p.sf.net/sfu/adobe-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: