[Snort-devel] Minor log tweak/patch.

Todd Lewis tlewis at ...255...
Tue Apr 3 11:39:06 EDT 2001


What would be really cool is a flexible output engine which you could
give a format to use on the fly, without changing any code.

--
Todd Lewis
tlewis at ...255...

On Tue, 3 Apr 2001, Fyodor wrote:

> On Tue, Apr 03, 2001 at 02:33:13PM +0200, Scott A. McIntyre wrote:
> > This lame little patch was thrown together to solve two minor
> > customization issues that I wanted with snort.  Others may find them
> > useful, or, they may not.
> > 
> > 
> > Taken from the latest CVS checkout, the first will change the logfile
> > format to be YYYYMMDD.HHMM, which is easier for me to look at than the @
> > version without the year.
> > 
> > Secondly, it will create a symbolic link from whichever binary log file
> > was created to the name "current"
> > 
> > I end up having to restart my snort sometimes a dozen times per day and
> > this handy shortcut is already saving me hassle.
> > 
> > Scott
> > 
> > p.s. those of you who are Good at C will probably fine a number of
> > faults with how I did this latter thing, I'm happy to take suggestions
> > on making it more clean.  
> > 
> 
> If folks feel fancy, I guess we could commit suggested changes into the source-tree as well. I personally like 'dot' separation in the date, a way easier to read now. Any other opinions? :)
> 
> _______________________________________________
> Snort-devel mailing list
> Snort-devel at lists.sourceforge.net
> http://lists.sourceforge.net/lists/listinfo/snort-devel
> 





More information about the Snort-devel mailing list