[Snort-users] -N switch fails?

Sheahan, Paul (PCLN-NW) Paul.Sheahan at ...2218...
Thu Jun 14 23:19:46 EDT 2001

Yes, the data is being dumped into the directories. BTW this is version 1.7.
I have removed the -h option and will send the results to the list.

I appreciate the help!


-----Original Message-----
From: Martin Roesch
To: Sheahan, Paul (PCLN-NW)
Cc: Snort List (E-mail)
Sent: 6/14/01 3:32 PM
Subject: Re: [Snort-users] -N switch fails?

Is the data being dumped into the directories as well?  Try to stop
using the -h switch and see if that effects anything...


"Sheahan, Paul (PCLN-NW)" wrote:
> Hello,
> Has anyone experienced this? The -N switch on snort doesn't seem to be
> working unless there is something else I'm missing.
> Just to be sure.. I stopped snort, and restarted it with this script:
> #!/bin/bash
> /usr/sbin/snort -A full -c /etc/snort/snort.conf -h -i
> -l /var/log/snort -D -N
> Yet, the directories for each offending IP address are being created
> /var/log/snort. I am trying to turn this off. Any ideas on what I
might be
> doing wrong?
> Thanks,
> Paul
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

Martin Roesch
roesch at ...1935...
http://www.sourcefire.com - http://www.snort.org

More information about the Snort-users mailing list