[Snort-users] Alert vs. Log?

Martin Roesch roesch at ...1935...
Mon Mar 4 16:37:04 EST 2002


On 3/4/02 6:15 PM, "Erek Adams" <erek at ...577...> wrote:

[snip]

> [...snip...]
> 
> Quick-n-Dirty answer:  symlink /var/log/snort -> /dev/null

Or just do a '-A none' at the command line.

It's in the README and the man page...  :)

     -Marty


-- 
Martin Roesch - Founder/CEO, Sourcefire Inc. - (410)290-1616
Sourcefire: Professional Snort Sensor and Management Console appliances
roesch at ...1935... - http://www.sourcefire.com
Snort: Open Source Network IDS - http://www.snort.org





More information about the Snort-users mailing list