[Snort-users] alert_syslog

Peggy Kam ppkam at ...11126...
Fri Feb 6 12:11:11 EST 2004


I actually tried that before, it did not work for the switch command.  
Does anyone have  any other ideas on how to change the syslog file?

Thanks again,
Peggy

Josh Berry wrote:

>You can configure your syslog.conf file with:
>
>auth.alert       /var/log/(whatever_you_want_to_call_the_file)
>
>and then restart syslog.  I am not sure if this works with the command
>line switch but it works if you use the syslog configuration in your
>snort.conf file.
>
>  
>
>>Hi,
>>
>>Does anyone know how to sends alerts to some other file other than to
>>the default syslog file (when using the -s switch command line)?
>>
>>Thanks in advance,
>>Peggy
>>
>>
>>
>>-------------------------------------------------------
>>The SF.Net email is sponsored by EclipseCon 2004
>>Premiere Conference on Open Tools Development and Integration
>>See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
>>http://www.eclipsecon.org/osdn
>>_______________________________________________
>>Snort-users mailing list
>>Snort-users at lists.sourceforge.net
>>Go to this URL to change user options or unsubscribe:
>>https://lists.sourceforge.net/lists/listinfo/snort-users
>>Snort-users list archive:
>>http://www.geocrawler.com/redir-sf.php3?list=snort-users
>>
>>    
>>
>
>
>Thanks,
>Josh Berry, CISSP
>CTO, VP of Product Development
>LinkNet-Solutions
>469-831-8543
>josh.berry at ...10268...
>
>
>
>-------------------------------------------------------
>The SF.Net email is sponsored by EclipseCon 2004
>Premiere Conference on Open Tools Development and Integration
>See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
>http://www.eclipsecon.org/osdn
>_______________________________________________
>Snort-users mailing list
>Snort-users at lists.sourceforge.net
>Go to this URL to change user options or unsubscribe:
>https://lists.sourceforge.net/lists/listinfo/snort-users
>Snort-users list archive:
>http://www.geocrawler.com/redir-sf.php3?list=snort-users
>  
>





More information about the Snort-users mailing list