[Snort-users] snort logs /var/log/snort

Grime, Richard S richard.grime at ...8411...
Mon Oct 25 12:55:01 EDT 2004


> 1.  how do i shut off the /var/log/snort logging completely?  
> I am just using a fast output log, which is all i need, and 
> the packet logging it does by defualt in /var/log/snort i 
> need not to happen at all (for space reasons).

The -N command line option: "Turn off logging (alerts still work)"
  
> 2.  Is it possible to use snort as a log where (urls) users 
> are going when they web out?  If snort cant do it, is there 
> anything anyone knows that can do this?

Urlsnarf will do this (not to say Snort couldn't): 
http://www.monkey.org/~dugsong/dsniff/




More information about the Snort-users mailing list