[Snort-users] Snort Logs (May be a stupid question)

Martin Roesch roesch at ...421...
Wed Jan 24 11:32:46 EST 2001


Snort logs to /var/log/snort by default.  You can change the output
directory by using the -l command line switch.

   -Marty

Kevin.Brown at ...1022... wrote:
> 
> I think by default snort logs to /var/log
> You should find /var/log/snort_portscan.log and a directory called snort.
> 
> > You can call me a newbie in this snort stuff so i apologize for the
> > stupidness of this question ( if it is ). Here is my question,
> > I've installed snort on my SuSE 7.0 system and it seems to work fine but
> > when i try to portscan my host from outside my network it doesn't log
> > the /etc/portscan.log file, and when i try to attack my box it even
> > doesn't log it to the /etc/snort/snort.alert file. What might be the
> > problem? Here is hpw i run snort :
> > snort -D -i eth0 -c /etc/snort/snort-lib
> >
> > BTW the configuration files are the ones come default with the SuSE 7.0
> > distribution.
> >
> > Thanx in advance.
> >
> >
> >
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users at lists.sourceforge.net
> > Go to this URL to change user options or unsubscribe:
> > http://lists.sourceforge.net/lists/listinfo/snort-users
> >
> 
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users

--
Martin Roesch
roesch at ...421...
http://www.snort.org




More information about the Snort-users mailing list