[Snort-users] snort switches

Chris Green cmg at ...671...
Mon Oct 15 19:31:02 EDT 2001

"snortlst snortlst" <snortlst at ...125...> writes:

> What are the most recommended switches for starting snort ?
> Should I log it to binary file and then decode it, or should I use 'normal'
> logging?

-b and -A fast are a nice compromise between pure speed and knowing
what is going on at once.

Chris Green <cmg at ...671...>
I've had a perfectly wonderful evening. But this wasn't it.
     -- Groucho Marx

More information about the Snort-users mailing list