[Snort-users] snort on freebsd

Erek Adams erek at ...577...
Sat Sep 15 14:14:02 EDT 2001

On Sat, 15 Sep 2001, Ilya wrote:


> my snort.conf is in usual for freebsd place - /usr/local/etc/snort.conf
> I have this enabled :
> output alert_unified: /var/log/snort/snort.alert
> output log_unified: /var/log/snort/snort.log
> and I have bunch of these: include /usr/local/share/snort/scan.rules in the
> file.
> Does snort look for config file somewhere else? or did i miss something ?

Actually, yes it does.  It looks first in /etc/ for snort.conf then in ./ then
looks for $HOME/.snortrc .

You can also specify it on the command line with -c <conf_file> .

Hope this helps!

Erek Adams

More information about the Snort-users mailing list