Snort mailing list archives
Re: Snort only partially alerting.
From: beenph <beenph () gmail com>
Date: Fri, 14 Jun 2013 18:34:25 -0400
On Fri, Jun 14, 2013 at 3:50 PM, Frank Calone <fc10011001 () gmail com> wrote:
I added the following option to the command line: -k none Here is the full command line I'm using: /usr/sbin/snort -A fast -b -d -D -k none -i em3 -u snort -g snort -c /etc/snort/snort.conf -l /var/log/snort -G 3
Remove " -A fast -b " From the command line if you want something else than pcap format output logging. -elz ------------------------------------------------------------------------------ This SF.net email is sponsored by Windows: Build for Windows Store. http://p.sf.net/sfu/windows-dev2dev _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Snort only partially alerting. Frank Calone (Jun 12)
- Re: Snort only partially alerting. Joel Esler (Jun 12)
- Re: Snort only partially alerting. Frank Calone (Jun 14)
- Re: Snort only partially alerting. beenph (Jun 14)
- Re: Snort only partially alerting. Frank Calone (Jun 14)
- Re: Snort only partially alerting. Joel Esler (Jun 12)