[Snort-users] -N switch fails?

Sheahan, Paul (PCLN-NW) Paul.Sheahan at ...2218...
Fri Jun 15 00:54:02 EDT 2001


I took out the -h and now the -N works! Thanks for the help!

Paul


-----Original Message-----
From: Martin Roesch
To: Sheahan, Paul (PCLN-NW)
Cc: Snort List (E-mail)
Sent: 6/14/01 3:32 PM
Subject: Re: [Snort-users] -N switch fails?

Is the data being dumped into the directories as well?  Try to stop
using the -h switch and see if that effects anything...

    -Marty

"Sheahan, Paul (PCLN-NW)" wrote:
> 
> Hello,
> 
> Has anyone experienced this? The -N switch on snort doesn't seem to be
> working unless there is something else I'm missing.
> 
> Just to be sure.. I stopped snort, and restarted it with this script:
> 
> #!/bin/bash
> /usr/sbin/snort -A full -c /etc/snort/snort.conf -h 12.23.56.78/24 -i
eth0
> -l /var/log/snort -D -N
> 
> Yet, the directories for each offending IP address are being created
in
> /var/log/snort. I am trying to turn this off. Any ideas on what I
might be
> doing wrong?
> 
> Thanks,
> Paul
> 
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

--
Martin Roesch
roesch at ...1935...
http://www.sourcefire.com - http://www.snort.org




More information about the Snort-users mailing list