[Snort-users] Snort Alerting ..

Mark Fagan r00t at ...10564...
Sat Nov 22 10:36:04 EST 2003


Hi all,

I am running many instances of Snort over a large amount of sites and am 
having the same problem over and over.

I am logging to MySql sucessfully for all sensors, however every sensor also 
has an alert file located @ /var/log/snort.

I dont have the -l option anywhere in my startup config and my snort.conf(s) 
only contain a siggle logging statement, which is for MySql.

I am running Snort 2.0.2 on RH 9.0.

Thanks in advance for any assistance offered.

Regards

Mark





More information about the Snort-users mailing list