[Snort-users] stop that pesky logging

Erek Adams erek at ...577...
Tue Apr 2 03:43:00 EST 2002

On Mon, 1 Apr 2002 Mike_Sands at ...5033... wrote:

> Sorry for the previously miss-labeled subject.

Hrmmm...  I might could add that to the penalty list.  ;-)

> I've been running snort 1.8.3 with demarc logging to a MySQL database.
> Unfortunately when I start demarc/snort the pig insists on logging to both
> my database and /var/log/snort. I would really like to just log to the
> database for performance/diskspace/management reasons but I can't seem to
> stop the other logging. On reviewing my snort.conf file I only have the
> configuration set to log to the database and I'm not setting this via the
> command line.
> Is there a way to explicitly tell snort not to log to /var/log/snort?

First:  I've never used demarc.   I might be off base with some of this...

More information about the Snort-users mailing list