[Snort-users] -N switch fails?

Martin Roesch roesch at ...1935...
Thu Jun 14 15:32:44 EDT 2001


Is the data being dumped into the directories as well?  Try to stop
using the -h switch and see if that effects anything...

    -Marty

"Sheahan, Paul (PCLN-NW)" wrote:
> 
> Hello,
> 
> Has anyone experienced this? The -N switch on snort doesn't seem to be
> working unless there is something else I'm missing.
> 
> Just to be sure.. I stopped snort, and restarted it with this script:
> 
> #!/bin/bash
> /usr/sbin/snort -A full -c /etc/snort/snort.conf -h 12.23.56.78/24 -i eth0
> -l /var/log/snort -D -N
> 
> Yet, the directories for each offending IP address are being created in
> /var/log/snort. I am trying to turn this off. Any ideas on what I might be
> doing wrong?
> 
> Thanks,
> Paul
> 
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

--
Martin Roesch
roesch at ...1935...
http://www.sourcefire.com - http://www.snort.org




More information about the Snort-users mailing list