[Snort-devel] sfPortscan output
chris at ...2315...
Fri Nov 19 13:31:11 EST 2004
I think making it configurable so it can be made to do both or either is
the way to go.
I personally prefer to have both, but someone else may be content with
just either of the two.
Daniel Roelker wrote:
> Do you guys want to be able to do one or the other? Or do you want to
> be able to specify both at the same time? Either way we'll try to get
> this in before the final release of 2.3.
> Thanks for your post.
> On Thu, 2004-11-11 at 04:58, Passreality wrote:
>>I use the logfile parameter in the sfPortscan
>>preprocessor and wonder if its possible to get it to
>>log only to file and not to both file and DB ?
More information about the Snort-devel