Re: Subdirectories created in /var/log/snort

[twig les <twigles () yahoo com>]

One per offending IP is normal.  You can manage it any way you
see fit, from turning this feature off, parsing it and emailing
yourself interesting stuff, or rm -rf * once a week in cron. 
Personally I have the space to spare on my sensor (non-local
logging primarily) so I just let it build up a good archive
until I need the space, which ends up being every 5 years at the
rate I'm filling up :).

--- francisv () dagupan com wrote:
> Hi,
>
> I was just wondering why there are so many subdirectories (IP
> addresses)
> inside /var/log/snort. Is there a way to manage this?
>
> ---
>  francis a. vidal [bitstop network services] |
> http://www.bnshosting.net
>  streaming media + web hosting               |
> http://www.bitstop.ph
>  v(02)330-2871,(02)330-2872; f(02)330-2873   |
> http://www.kuro.ph
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by:Crypto Challenge is now
> open! 
> Get cracking and register here for some mind boggling fun and 
> the chance of winning an Apple iPod:
> http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0031en
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


=====
-----------------------------------------------------------
Know yourself and know your enemy and you will never fear defeat.         
-----------------------------------------------------------

__________________________________________________
Do you Yahoo!?
Yahoo! Web Hosting - establish your business online
http://webhosting.yahoo.com


-------------------------------------------------------
This SF.net email is sponsored by:Crypto Challenge is now open! 
Get cracking and register here for some mind boggling fun and 
the chance of winning an Apple iPod:
http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0031en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users