[Fwd: RE: [Snort-users] Log to remote syslog server and MySql Database]
fknobbe at ...652...
Sun Jan 5 11:17:03 EST 2003
On Sun, 2003-01-05 at 10:02, L. Christopher Luther wrote:
> Since I don't want to disable one of the processors on my WinNT4 box,
> I'm kinda "stuck" w/ Snort 1.8.6, at least until WinPCap officially
> supports SMP environments.
while I'm not able to help you with SMP issues, the syslog patch is
still valid for 1.8.6. You may have to change the code by hand though.
In snort.c, in function parsecmdline, you'll see a switch() branch for
the command line args. One of the case's (case '-s') handles the syslog
stuff (it is commented in the source). Just change the pv.cmd_override=1
to 0, or remove the line. That's all. Recompile and your good to go.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 187 bytes
Desc: This is a digitally signed message part
More information about the Snort-users