[Snort-users] alert file, database output?!?!

Federico Lombardo egopfe at ...125...
Thu Jan 16 00:42:07 EST 2003

I've already checked  mailing list.

The problem is that logging rules described in my snort.conf send all to a
database, I don't mentione about an alert file, so It's strange that snort
logs to a database for normal alerts, and for bad traffic evasion and
insertion alert to a file, doesn't it ?

----- Original Message -----
From: "Robby Desmond" <rdesmond at ...6547...>
To: "Federico Lombardo" <egopfe at ...125...>
Sent: Thursday, January 16, 2003 12:20 AM
Subject: Re: [Snort-users] alert file, database output?!?!

> Don't remember about the alerts in files, but it's on the list, search
> marc.theaimsgroups.com with google.
> As for the BAD packets, that's the preprocessor asn1.
> -Robby
> Robert Desmond
> Systems Administrator
> UCSB Extended Learning Services
> 805-893-4906

More information about the Snort-users mailing list