Re: SNORT GENERATING SNORT.LOG INSTEAD SNORT.U2 files

[Marcio Guerreiro <marcio.guerreiro () hotmail co uk>]

Waldo 

 

You have just fixed the problem by asking me that question. My mistake !!! I was running snort with the –A console 
parameter :

 

snort  -Q -A console -u snort -g snort -c /etc/snort/snort.conf -i eth1:eth2

 

now I ran without the –A and it is working !!! thank you !!!

 

snort  -Q  -u snort -g snort -c /etc/snort/snort.conf -i eth1:eth2

 



 

 

 

 

 

 

-----Original Message-----
From: waldo kitty [mailto:wkitty42 () windstream net] 
Sent: 10 July 2015 11:48
To: snort-users () lists sourceforge net
Subject: Re: [Snort-users] SNORT GENERATING SNORT.LOG INSTEAD SNORT.U2 files

 

On 07/10/2015 06:11 AM, Marcio Guerreiro wrote:

> The problem is that the logs used to be generated as snort.u2 files, 

> but now is being generated as snort.log. I already checked the 

> snort.conf line 520  where the output format is specified and it is 

> correct (it hasn’t been changed)

>

> My barnyard2 used to work and does not work anymore because it 

> supposed to look for those (snort.u2) files.

>

> Any ideas ?

 

you haven't told us what your command line is or what your output settings are... no way to start guessing without 
those important pieces of information...

 

--

  NOTE: No off-list assistance is given without prior approval.

        *Please keep mailing list traffic on the list* unless

        private contact is specifically requested and granted.

 

------------------------------------------------------------------------------

Don't Limit Your Business. Reach for the Cloud.

GigeNET's Cloud Solutions provide you with the tools and support that you need to offload your IT needs and focus on 
growing your business.

Configured For All Businesses. Start Your Cloud Today.

 <https://www.gigenetcloud.com/> https://www.gigenetcloud.com/

_______________________________________________

Snort-users mailing list

 <mailto:Snort-users () lists sourceforge net> Snort-users () lists sourceforge net

Go to this URL to change user options or unsubscribe:

 <https://lists.sourceforge.net/lists/listinfo/snort-users> https://lists.sourceforge.net/lists/listinfo/snort-users

Snort-users list archive:

 <http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users> 
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

 

Please visit  <http://blog.snort.org> http://blog.snort.org to stay current on all the latest Snort news!

------------------------------------------------------------------------------
Don't Limit Your Business. Reach for the Cloud.
GigeNET's Cloud Solutions provide you with the tools and support that
you need to offload your IT needs and focus on growing your business.
Configured For All Businesses. Start Your Cloud Today.
https://www.gigenetcloud.com/

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!