Snort mailing list archives
Re: Snort-users Digest, Vol 42, Issue 21
From: Marcos Rodriguez <mrodriguez () sourcefire com>
Date: Tue, 17 Nov 2009 18:07:52 -0500
Message: 2 Date: Tue, 17 Nov 2009 16:29:11 -0500 From: Eoin Miller <eoin.miller () trojanedbinaries com> Subject: [Snort-users] Snort Ignores Filenames for alert_unified and log_unified? To: Snort-users () lists sourceforge net Message-ID: <4B0315A7.4010104 () trojanedbinaries com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Does Snort just ignore the base filenames set for the alert_unified and log_unified options? I have tried this: ---snort.conf snip--- output alert_unified: 00-snort.alert, limit 128 output log_unified: 00-snort.log, limit 128 ---snort.conf snip--- And these are the filenames I get: # ls -1 snort-unified.alert.1258491654 snort-unified.log.1258491654 Anyone have these types of issues? -- Eoin
Hi Eoin, You need to use the filename option, i.e. output alert_unified: filename 00-snort.alert, limit 128 output log_unified: filename 00-snort.log, limit 128 Thanks! Marcos
------------------------------------------------------------------------------ Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Re: Snort-users Digest, Vol 42, Issue 21 Marcos Rodriguez (Nov 17)