[Snort-users] Logging to dual hosts..

Marc Hering mhering at ...13116...
Mon Mar 21 07:46:42 EST 2005


Hey guys
I currently have snort set to log to Mysql as well as Syslog.  I am
having a problem getting Syslog to redirect itt's local3.* to both a
remote syslog host as well as the local logfile.
 
I have the following entry in my syslog.conf
 
local3.*                                                @1.2.3.4
 
If I try
local3.*
@1.2.3.4,/var/log/snort/snort.log
it only writes to the @1.2.3.4 address (Please note that all IP
addresses have been changed to protect the innocent :) )
 
According to the man pages and documentation for syslog this should
work.....what am I missing here? 
 
Thanks!
<M>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20050321/00f66a4e/attachment.html>


More information about the Snort-users mailing list