[Snort-users] Snort only partially alerting.

beenph beenph at ...11827...
Fri Jun 14 18:34:25 EDT 2013


On Fri, Jun 14, 2013 at 3:50 PM, Frank Calone <fc10011001 at ...11827...> wrote:
> I added the following option to the command line:
> -k none
>
> Here is the full command line I'm using:
> /usr/sbin/snort -A fast -b -d -D -k none -i em3 -u snort -g snort -c
> /etc/snort/snort.conf -l /var/log/snort -G 3
>

Remove " -A fast -b " From the command line if you want something else
than pcap format output logging.

-elz




More information about the Snort-users mailing list