[Snort-users] ARP logging?

Cade Cairns cairnsc at ...7156...
Fri Oct 11 13:35:05 EDT 2002


It's already commented out.  I had assumed that to be equivalent to having
it turned off; is that not the case?

Regards,
Cade Cairns

On Fri, 11 Oct 2002, matt wrote:

> I'm pretty sure what you need to do is to turn off  the arpspoof preprocessor.
>
> At 01:54 PM 10/11/2002 -0600, Cade Cairns wrote:
> >Sorry in advance for what is likely largely due to my lazyness.  With a
> >default installation of snort 1.9.0, some ARP packets are being logged.
> >How do I turn this feature off?  It's already filling my disk that with
> >log data that I have no desire to see.
> >
> >Regards,
> >Cade Cairns
>





More information about the Snort-users mailing list