AW: [Snort-users] Same question again..
Sandro.Poppi at ...3316...
Thu May 30 02:46:02 EDT 2002
If I remember right Erek already told you to use the correct commandline
/usr/local/snort -b -c snort.conf -i eth0 -D
else your snort.conf would probably not be read.
> This is how I startup Snort:
> /usr/local/snort -b snort.conf -i eth0 -D
> THis is how the relevant part of my snort.conf looks like:
> output alert_syslog: LOG_LOCAL7 LOG_ALERT
> output log_tcpdump: snort.log
More information about the Snort-users