[Snort-users] how do I stop snort logging to /var/log/snort and only the database?
Andrew R. Baker
andrewb at ...950...
Mon Oct 29 23:03:02 EST 2001
You are seeing this behaviour because you have not identified any packet
logging mechanisms in your configuration or commdanline, thus snort logs
packets using the default behaviour. If you will add a packet logging
option to either the configuration file or the commandline, you will no
longer get all of the IP address directories in /var/log/snort.
More information about the Snort-users