[Snort-devel] sfPortscan output

Chris Keladis chris at ...2315...
Fri Nov 19 13:31:11 EST 2004

Hi Daniel,

I think making it configurable so it can be made to do both or either is 
the way to go.

I personally prefer to have both, but someone else may be content with 
just either of the two.



Daniel Roelker wrote:

> Do you guys want to be able to do one or the other?  Or do you want to
> be able to specify both at the same time?  Either way we'll try to get
> this in before the final release of 2.3.
> Thanks for your post.
> Dan
> On Thu, 2004-11-11 at 04:58, Passreality wrote:
>>I use the logfile parameter in the sfPortscan
>>preprocessor and wonder if its possible to get it to
>>log only to file and not to both file and DB ?

More information about the Snort-devel mailing list