Snort mailing list archives

predefined variables


From: "Nathan W. Labadie" <ab0781 () wayne edu>
Date: Mon, 10 Sep 2001 09:28:02 -0400

Are there any predefined variables that can be used in the snort 
configuration file (ie, %m-%d-%y for month-date-year)? 

Here's the problem I'm having:
I have "output log_tcpdump: /var/log/snort/snort_log.tcpdump" specified 
in my configuration file. Whenever snort gets restarted, it stops 
logging to the file because the file already exists. I'd like to be 
able to have it name the file something like 
"%m-%d-%y_snort_log.tcpdump".

I know if I don't pass any options to "output log_tcpdump" it'll do 
something similiar to this, but I was wondering if there was any way to 
have more control over it...

Thanks much,
Nate

-- 
Nathan W. Labadie       | ab0781 () wayne edu
Sr. Security Specialist | 313/577.2126
Wayne State University  | 313/577.5626 fax

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: