[Snort-sigs] I'm very new to snort, please help

Ray Pierce rpierce at ...1451...
Fri Apr 11 06:57:23 EDT 2003


It seems to be working just fine.  The only problem is that the /var slice "fills up".
Inside /var/log/snort, there are thousands of ip's.

I don't know how to control all those IP's, wonder if there is a way to delete them after 7 days.  Perhaps a modification to snort.conf.

Ray Pierce
rpierce at ...1451...
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20030411/b453fa5d/attachment.html>


More information about the Snort-sigs mailing list