Snort mailing list archives

Re: Snort only partially alerting.


From: beenph <beenph () gmail com>
Date: Fri, 14 Jun 2013 18:34:25 -0400

On Fri, Jun 14, 2013 at 3:50 PM, Frank Calone <fc10011001 () gmail com> wrote:
I added the following option to the command line:
-k none

Here is the full command line I'm using:
/usr/sbin/snort -A fast -b -d -D -k none -i em3 -u snort -g snort -c
/etc/snort/snort.conf -l /var/log/snort -G 3


Remove " -A fast -b " From the command line if you want something else
than pcap format output logging.

-elz

------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:

Build for Windows Store.

http://p.sf.net/sfu/windows-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!


Current thread: