[Snort-users] Logging to TTY and file

Aaron S. Carmichael aaron at ...532...
Thu Oct 12 12:53:03 EDT 2000

Using the syslog facility I send all my logs to my local machine in the
office and at home. There the data is checked by scripts I have running.
Works quite well and with pop-up alerts and paging services for certain
entries I can be working on whatever I need to, storing my logs and or
getting coffee.

If you want a simple client to use try Kiwi's Syslog Daemon. You can
register and get additional functionality if you want or just use it as

Aaron S. Carmichael
VP Information Technology
TimeCertain, LLC.

This message is for the named persons use only.  It may contain
confidential, proprietary or legally privileged information.  No
confidentiality or privilege is waived or lost by any mistransmission.  If
you receive this message in error, please immediately delete it and all
copies of it from your system, destroy any hard copies of it and notify the
sender.  You must not, directly or indirectly, use, disclose, distribute,
print, or copy any part of this message if you are not the intended
recipient. Any views expressed in this message are those of the individual
sender, except where the message states otherwise and the sender is
authorized to state them to be the views of any such entity.

-----Original Message-----
From: snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net]On Behalf Of Gregor
Sent: Thursday, October 12, 2000 1:41 PM
To: Brian Caswell
Cc: Quek Wei (CA - Calgary); 'snort-users at lists.sourceforge.net'
Subject: Re: [Snort-users] Logging to TTY and file

Brian Caswell on Wed, Oct 11, 2000 at 02:55:39PM +0000:


> > I am running SNORT version 1.6.3 on RH6.2. Is it possible to log SNORT
> > alerts to both TTY (say TTY7 or TTY8) and logfile at the same time? This
> > useful for me because I happen to have a monitor hanging off the IDS.
> tail -f snortlog > /dev/tty8 &

Or log through syslog and log facility auth to multiple destinations.


Gregor Binder  <gbinder at ...462...>  http://www.sysfive.com/~gbinder/
sysfive.com GmbH             UNIX. Networking. Security. Applications.
Gaertnerstrasse 125b, 20253 Hamburg, Germany       TEL +49-40-63647482
Snort-users mailing list
Snort-users at lists.sourceforge.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Aaron S. Carmichael (E-mail).vcf
Type: text/x-vcard
Size: 483 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20001012/23b57b47/attachment.vcf>

More information about the Snort-users mailing list