[Snort-users] loghog question

Matthew Harrell mhar at ...7038...
Mon Oct 7 10:14:01 EDT 2002


Nevermind--I got it.  The ignore file is to ignore hosts in the automatic
firewall blocking--not in reporting.

-----------------
Matt Harrell
Plexus Systems
mhar at ...7038...


-----  On 10/7/2002 1:11 PM, Matthew Harrell <mhar at ...7038...> wrote: 
>Not sure if this is an appropriate list for a loghog question, but I can't
>find any online resources for issues with loghog (other than e-mailing the
>author).
>
>I'm running Snort 1.8.7 on Mandrake Linux 9.0 with loghog 0.1.
>
>I have several entries in my loghog "ignore_hosts" file.  One node is
>giving me constant false alarms, and I'm trying to get loghog to quit
>sending me e-mails about it.  However, even with the entry in ignore_hosts,
>I'm still getting the e-mails.  I've killed and restarted loghog, but I'm
>still getting those darn e-mails.  Any suggestions from other loghog 
>users?
>
>-----------------
>Matt Harrell
>Plexus Systems
>mhar at ...7038...
>
>
>
>
>-------------------------------------------------------
>This sf.net email is sponsored by:ThinkGeek
>Welcome to geek heaven.
>http://thinkgeek.com/sf
>_______________________________________________
>Snort-users mailing list
>Snort-users at lists.sourceforge.net
>Go to this URL to change user options or unsubscribe:
>https://lists.sourceforge.net/lists/listinfo/snort-users
>Snort-users list archive:
>http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
>
>
>





More information about the Snort-users mailing list