Snort mailing list archives
Re: snort not logging full output to syslog
From: Rajeev Sinha <sinharajeev17 () gmail com>
Date: Sun, 13 Nov 2011 12:11:28 -0500
You mean to say that syslog plugin of Snort itself doesn't support sending full log messages and that I will need to use local/DB logging if I want to see full alert message? On Sun, Nov 13, 2011 at 12:01 PM, Joel Esler <jesler () sourcefire com> wrote:
Syslog doesn't output those fields. You'd have to use something like -A full as an output method. J On Nov 13, 2011, at 11:42 AM, Rajeev Sinha wrote:Hi all, I am able to send snort alerts to my remote syslog server but I am notable to see full alert message. I am specifically interested in receiving XREF (CVE, bugtraq etc) field.I am starting syslog as- snort -c /etc/snort/snort.conf Has anybody been able to achieve this? Thanks for the help, Rajeev------------------------------------------------------------------------------RSA(R) Conference 2012 Save $700 by Nov 18 Register nowhttp://p.sf.net/sfu/rsa-sfdev2dev1_______________________________________________Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users Please visit http://blog.snort.org to stay current on all the latestSnort news!
------------------------------------------------------------------------------ RSA(R) Conference 2012 Save $700 by Nov 18 Register now http://p.sf.net/sfu/rsa-sfdev2dev1
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- snort not logging full output to syslog Rajeev Sinha (Nov 13)
- Re: snort not logging full output to syslog Joel Esler (Nov 13)
- Re: snort not logging full output to syslog Rajeev Sinha (Nov 13)
- Re: snort not logging full output to syslog Joel Esler (Nov 13)