[Snort-users] Alert in syslog file

Raffael Maio Vador at ...1224...
Fri Oct 15 08:41:11 EDT 2004

Yes I comment this line too and the message was always send to the syslog.

I probably had an another problem, because when I reboot, the problem solved
by them self ?!?

So, now it still wotking fine, 


-----Message d'origine-----
De : snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net] De la part de prabu
Envoyé : vendredi, 15. octobre 2004 07:58
À : Raffael Maio; snort-users at lists.sourceforge.net
Objet : Re: [Snort-users] Alert in syslog file

> I see that all my alerts are sending to the syslog system. Is is
> obligatory??!?
> How can I remove that option  ?! Because the syslog file becomes very 
> bigger
> when there is lot of alert !!!
> How must I do to don't send alert to syslog?
> I have removed the line in the snort.conf that send to syslog, but it
> continue to send it in syslog

If U r using snort on Windows,
then u must comment the following line in snort.conf.
# output alert_syslog: LOG_AUTH LOG_ALERT

If it is on Unix machines,
then U must comment on the line,
# output alert_syslog: LOG_AUTH LOG_ALERT

Have u commented the right one?


Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.776 / Virus Database: 523 - Release Date: 10/12/2004 

This SF.net email is sponsored by: IT Product Guide on ITManagersJournal
Use IT products in your business? Tell us what you think of them. Give us
Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

More information about the Snort-users mailing list