Re: Daily mail notification don't work anymore

[Sam Przyswa <samp () arial-concept com>]

Frank Knobbe a écrit :

> On Tue, 2004-12-28 at 08:40 +0100, Sam Przyswa wrote:
>
>  
>
> > The only way to log in ASCII format in /var/log/snort/alert log file for
> >    
>
>  
>
> > me it's to add the "-A full" option into the snort.common.parameters but
> >    
>
>  
>
> > then IT STOP TO LOG IN MySQL !
> >    
>
>
> That is not correct. Do not add -A as it will disable all outputs
>
> configured in snort.conf.
>
>
> Instead, add the following to snort.conf:
>
> output alert_full: alert.ids   (for full, multi-line output into
>
> alert.ids)
>
>
> output log_ascii:     (for full packet details in /var/log/snort/<ip>)
>
>  
Ok, that's work now , thanks !

Sam.




-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://productguide.itmanagersjournal.com/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users