[Snort-devel] sfPortscan output

Chris Keladis chris at ...2315...
Fri Nov 19 13:31:11 EST 2004


Hi Daniel,

I think making it configurable so it can be made to do both or either is 
the way to go.

I personally prefer to have both, but someone else may be content with 
just either of the two.




Regards,

Chris.


Daniel Roelker wrote:

> Do you guys want to be able to do one or the other?  Or do you want to
> be able to specify both at the same time?  Either way we'll try to get
> this in before the final release of 2.3.
> 
> Thanks for your post.
> 
> Dan
> 
> On Thu, 2004-11-11 at 04:58, Passreality wrote:
> 
>>Hi
>>
>>I use the logfile parameter in the sfPortscan
>>preprocessor and wonder if its possible to get it to
>>log only to file and not to both file and DB ?
>>
>>/Chriss




More information about the Snort-devel mailing list