[Snort-devel] 1.7 Quiet Mode Anyone?

Martin Roesch roesch at ...48...
Thu Jan 18 02:35:14 EST 2001


Hi Erek,
    I'll look into it...

    Hmm, looks like quiet mode needs a tweak or two...

   -Marty


Erek Adams wrote:
> 
> I'm having something odd happen here with quiet mode.
> 
> After some wailing and gnashing of teeth, I managed to get snort to replace
> tcpdump in a SHADOW setup.  This is a good thing(tm).  After upgrading to 1.7,
> I've got a very odd issue/error.
> 
> I call snort in readback mode with: "gunzip -c $file | snort -q -v -d -h
> 10.10.10.0/24 -r - $pattern" from a cgi.  This worked just fine in 1.7b8.  I
> only got my desired output, and no oddities.  Now, in 1.7, I'm getting the
> stats dropped into the output of the cgi.  I'm also getting the "Exiting..."
> line in my Apache error.log.
> 
> I'm not sure if this is the intended way for quiet mode to work, so I thought
> I'd ask.  :)
> 
> -----
> Erek Adams
> Nifty-Type-Guy
> TheAdamsFamily.Net
> 
> _______________________________________________
> Snort-devel mailing list
> Snort-devel at lists.sourceforge.net
> http://lists.sourceforge.net/mailman/listinfo/snort-devel

--
Martin Roesch
roesch at ...48...
http://www.snort.org




More information about the Snort-devel mailing list