AW: [Snort-users] Same question again..

Poppi, Sandro Sandro.Poppi at ...3316...
Thu May 30 02:46:02 EDT 2002

If I remember right Erek already told you to use the correct commandline

/usr/local/snort -b -c snort.conf -i eth0 -D

else your snort.conf would probably not be read.

> This is how I startup Snort:
> /usr/local/snort -b snort.conf -i eth0 -D
> THis is how the relevant part of my snort.conf looks like:
> output alert_syslog: LOG_LOCAL7 LOG_ALERT
> output log_tcpdump: snort.log

More information about the Snort-users mailing list