[Snort-users] scan.log and directory entry
robert at ...10519...
Mon Nov 10 05:57:01 EST 2003
I configured snort to log to sockets. It is as well creating for each
address a directory in /var/log/snort exept for portscans. Those are
logged in scan.log.
How can I configure snort to create for portscans as well a directory to
The reason for that is, that the socket listener is reconfiguring my
firewall based on the IP addresses in /var/log/snort.
More information about the Snort-users