[Snort-users] messages from snort

mysiar at ...3879... mysiar at ...3879...
Mon Nov 5 15:27:02 EST 2001


On Mon, 2001-11-05 at 22:35, Chris Green wrote:
> mysiar at ...3879... writes:
> 
> > hi
> > I have 3 instanes of snort running on 3 diferent interfaces
> > I does happen very often when snort dies and my script in cron
> > restarting it but on my working console I see all of the messages
> > telling me that something happend (snort died)
> >
> > my snort cocmmand line looks like
> >
> > snort -dev -c /etc/snort.conf -i eth0 -D
> >
> > I tried to direct it to > /dev/null
> > but nothing happend I still see these messages on my actual console.
> 
> remove the -v from your command line options.  That slows snort down
> considerably and you are trying to get rid of it.  That said,
> 
> >
> > Any ideas how I can get rid of this will be very appreciated
> >
> 
> Snort is printing to stderr so you will need to redirect that with
> 2>/dev/null

it is now 
snort -de -c /etc/snort.conf -eth0 -D 2>/dev/null

and I still have messages
device eth0 entered promiscuous mode

nothing has changed :-(

Piotr





More information about the Snort-users mailing list