From: Peixiao Guo (gpxzdus.com)
Date: Mon Sep 27 2004 - 21:06:33 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

I made a first test using snort. But I can't get log message the special
directory.

Here is my snort.conf:

output alert_fast: /home/snort/fst.log

log tcp any any -> any 80 (flags:S;)

I just want to put the "alert_fast" message to the file
/home/snort/fst.log, but I will get an error if I run this command:

snort -c snort.conf -d

the err messages as below:

Running in IDS mode

Log directory = /var/log/snort

ERROR:

[!] ERROR: Can not get write access to logging directory
"/var/log/snort".

(directory doesn't exist or permissions are set incorrectly

or it is not a directory at all)

Fatal Error, Quitting..

When I run this command:

snort -c snort.conf -dl /home/snort/

then all output message will be recorded in IP hierarchy in /home/snort
directory.

I m wandering how to log the output message to a /home/snort/fst.log
file

Can any senior one give me a directive?

Thanks very very much!

Pat Guo

-------------------------------------------------------
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.
Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]