[Snort-users] how do I stop snort logging to /var/log/snort and only the database?

Andrew R. Baker andrewb at ...950...
Mon Oct 29 23:03:02 EST 2001


You are seeing this behaviour because you have not identified any packet
logging mechanisms in your configuration or commdanline, thus snort logs
packets using the default behaviour.  If you will add a packet logging
option to either the configuration file or the commandline, you will no
longer get all of the IP address directories in /var/log/snort.

-Andrew




More information about the Snort-users mailing list