[Snort-users] Unable to configure unified2 output

JJ Cummings cummingsj at ...11827...
Wed Mar 31 12:21:25 EDT 2010


Lose the -A none

On Wed, Mar 31, 2010 at 10:14 AM, Mike Lococo <mikelococo at ...11827...> wrote:

> Todd,
>
> > Can you post the command line you are using and your snort.conf so we
> > can take a look?
>
> Backslashes added where the line wraps:
>
> sudo /usr/local/bin/snort -m 007 -A none -d -i dag1:0 -u snort \
> -g snort -c /etc/snort/snort0.conf -l /var/log/snort/dag1:0 \
> -F /etc/snort/snort.bpf
>
> Thanks for having a look,
> Mike Lococo
>
>
> ------------------------------------------------------------------------------
> Download Intel® Parallel Studio Eval
> Try the new software tools for yourself. Speed compiling, find bugs
> proactively, and fine-tune applications for parallel performance.
> See why Intel Parallel Studio got high marks during beta.
> http://p.sf.net/sfu/intel-sw-dev
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20100331/a760d01d/attachment.html>


More information about the Snort-users mailing list