<div dir="ltr">Is it really an hour difference (are you tailing the file live), or could there be some time skew due to Timezone, Daylight Savings, or misconfigured clocks?</div><div class="gmail_extra"><br><br><div class="gmail_quote">
On Thu, Jan 23, 2014 at 12:45 PM, LaTonya Hall <span dir="ltr"><<a href="mailto:lhall@...16550..." target="_blank">lhall@...16550...</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div style="word-wrap:break-word">Fast alert to a text file.<div><br><div>
<div style="text-indent:0px;letter-spacing:normal;text-align:start;text-transform:none;white-space:normal;word-wrap:break-word;word-spacing:0px"><div><div style="font-family:arial;font-size:small"><b>LaTonya Hall</b></div>
<div style="font-family:arial;font-size:small"><b><br></b></div><div style="font-family:arial;font-size:small"><b>Vahna, Inc. | Cyber Security Solutions</b></div><div style="font-family:arial;font-size:small"><a href="tel:202.803.6900%20x104" value="+12028036900" target="_blank">202.803.6900 x104</a></div>
<div style="font-family:arial;font-size:small">1211 Connecticut Ave NW</div><div style="font-family:arial;font-size:small">Suite 250</div><div style="font-family:arial;font-size:small">Washington, DC 20036</div><div style="font-family:arial;font-size:small">
<a href="http://www.vahna.com/" style="color:rgb(17,85,204)" target="_blank">www.vahna.com</a></div></div><div><br></div></div><br><br>
</div><div><div class="h5">
<br><div><div>On Jan 23, 2014, at 2:43 PM, Kevin Ross <<a href="mailto:kevross33@...14012..." target="_blank">kevross33@...14012...</a>> wrote:</div><br><blockquote type="cite"><div dir="ltr">How are you logging this? It is likely either timezone stuff on local system, in barnyard or if using something like Snorby the correct timezone not being set such as GMT. So while the alert is generated the time is appearing as 1 hour later.<br>

</div><div class="gmail_extra"><br><br><div class="gmail_quote">On 23 January 2014 16:28, LaTonya Hall <span dir="ltr"><<a href="mailto:lhall@...16550..." target="_blank">lhall@...16550...</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">

<div style="word-wrap:break-word"><div>There is about a one hour delay from exploit attempt to snort alert…any ideas?</div><span><font color="#888888"><div><br></div><div>
<div style="text-indent:0px;letter-spacing:normal;text-align:start;text-transform:none;white-space:normal;word-wrap:break-word;word-spacing:0px"><div><div style="font-family:arial;font-size:small"><b>-LaTonya</b></div></div>

</div><br><br>
</div>
<br></font></span></div><br>------------------------------------------------------------------------------<br>
CenturyLink Cloud: The Leader in Enterprise Cloud Services.<br>
Learn Why More Businesses Are Choosing CenturyLink Cloud For<br>
Critical Workloads, Development Environments & Everything In Between.<br>
Get a Quote or Start a Free Trial Today.<br>
<a href="http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk" target="_blank">http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk</a><br>_______________________________________________<br>


Snort-users mailing list<br>
<a href="mailto:Snort-users@lists.sourceforge.net" target="_blank">Snort-users@lists.sourceforge.net</a><br>
Go to this URL to change user options or unsubscribe:<br>
<a href="https://lists.sourceforge.net/lists/listinfo/snort-users" target="_blank">https://lists.sourceforge.net/lists/listinfo/snort-users</a><br>
Snort-users list archive:<br>
<a href="http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users" target="_blank">http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users</a><br>
<br>
Please visit <a href="http://blog.snort.org/" target="_blank">http://blog.snort.org</a> to stay current on all the latest Snort news!<br></blockquote></div><br></div>
</blockquote></div><br></div></div></div></div><br>------------------------------------------------------------------------------<br>
CenturyLink Cloud: The Leader in Enterprise Cloud Services.<br>
Learn Why More Businesses Are Choosing CenturyLink Cloud For<br>
Critical Workloads, Development Environments & Everything In Between.<br>
Get a Quote or Start a Free Trial Today.<br>
<a href="http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk" target="_blank">http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk</a><br>_______________________________________________<br>

Snort-users mailing list<br>
<a href="mailto:Snort-users@lists.sourceforge.net">Snort-users@...4626...ceforge.net</a><br>
Go to this URL to change user options or unsubscribe:<br>
<a href="https://lists.sourceforge.net/lists/listinfo/snort-users" target="_blank">https://lists.sourceforge.net/lists/listinfo/snort-users</a><br>
Snort-users list archive:<br>
<a href="http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users" target="_blank">http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users</a><br>
<br>
Please visit <a href="http://blog.snort.org" target="_blank">http://blog.snort.org</a> to stay current on all the latest Snort news!<br></blockquote></div><br></div>