[Snort-users] Snort Alerting ..
r00t at ...10564...
Sat Nov 22 10:36:04 EST 2003
I am running many instances of Snort over a large amount of sites and am
having the same problem over and over.
I am logging to MySql sucessfully for all sensors, however every sensor also
has an alert file located @ /var/log/snort.
I dont have the -l option anywhere in my startup config and my snort.conf(s)
only contain a siggle logging statement, which is for MySql.
I am running Snort 2.0.2 on RH 9.0.
Thanks in advance for any assistance offered.
More information about the Snort-users