[Snort-users] 1.7 and mysql problem

Steve Halligan agent33 at ...187...
Wed Jan 31 16:31:56 EST 2001


You always want command line options to override anything in a conf file.
Start making rules or conf file settings that override the commandline
options and confusion will reign.  Much easier with the simple rule
COMMANDLINE > CONF FILE

> -----Original Message-----
> From: Scott A. McIntyre [mailto:scott at ...1050...]
> Sent: Wednesday, January 31, 2001 2:56 PM
> To: Snort Mailing List
> Subject: Re: [Snort-users] 1.7 and mysql problem
> 
> 
> 
> > Another thing to watch out for: I wasn't seeing anything
> > go to the DB, so I looked at syslog and snort was putting
> > out a warning saying that the command line had overridden
> > the db plugin line in the config file.
> > I had the -A flag set. When I removed it, snort logged to
> > the db fine.
> 
> I got bit by this one too (only for a few hours) -- is there a way
> around this, perhaps some type of ruletype specification?
> 
> Scott
> 
> 
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users
> 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20010131/fc27a4a5/attachment.html>


More information about the Snort-users mailing list