[Snort-users] Snort not logging....
mike at ...7385...
Sat Jan 4 07:37:05 EST 2003
I know this has been discussed, and discussed... but I'm a little lost.
I have SNORT configured to log to /var/log/snort/snort.log, however,
everything goes to var/log/messages instead. I would rather keep the Snort
logs seperate for parsing purposes.
I'm running RH 8.0 and Snort 1.9.
Here is a glimps into my config:
In my snort.conf file I have:
# alert_syslog: log alerts to syslog
# Use one or more syslog facilities as arguments
output alert_syslog: LOG_AUTH LOG_ALERT
Here is my startup script:
# See how we were called.
case "$1" in
echo -n "Starting snort: "
ifconfig $INTERFACE promisc
daemon /usr/local/bin/snort -U -o -z -i $INTERFACE -d -D -c
$CONFIG -l /var/log/snort/snort.log
Thanks in advance for your help.
More information about the Snort-users