Disable local logging

["Frank Reid" <fcreid () ourcorner org>]

Is there a way to disable local logging (to /var/log/snort) entirely, or
does that break normal operations?  (It may be something simple in
snort.conf, but I can't find it.)  On my active sensors, I've found the log
directory fills up quickly to a point where Snort can no longer add
directory entries.  It may be unrelated, but it also appears Snort
occasionally stops reporting upstream to the MySQL database under heavy
traffic volume.  The Snort process doesn't die on the sensor, so the demarc
wrapper does not know to restart it.

Frank



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users