[Snort-users] scan.log and directory entry

Robert Kriz robert at ...10519...
Mon Nov 10 05:57:01 EST 2003


Hi

I configured snort to log to sockets. It is as well creating for each 
address a directory in /var/log/snort exept for portscans. Those are 
logged in scan.log.
How can I configure snort to create for portscans as well a directory to 
/var/log/snort.

The reason for that is, that the socket listener is reconfiguring my 
firewall based on the IP addresses in /var/log/snort.

Thanks
Robert





More information about the Snort-users mailing list