[Snort-users] Snort Alerting issue ...

Mark Fagan r00t at ...10564...
Fri Nov 21 07:59:05 EST 2003


Hi All,

I am having an issue with multiple sensors regarding alerts.

In my snort.conf the only logging I have specified is MySQL, however every 
sensor has a local file named "alert" located @ /var/log/snort.

Sql logging is working fine ..... I would like to prevent Snort from logging 
locally ... I checked my two config files:

/etc/init.d/snort (no logging information specified here)

Snort.conf (only logging enabled is MySQL).

I would appreciate any assistance on this matter.

Kind Regards

Mark





More information about the Snort-users mailing list