From: Terry (td3201gmail.com)
Date: Thu Mar 12 2009 - 08:58:32 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hello,

I can't seem to get syslog and snort working well together. Here's what I got:

commands I've tried:
/usr/sbin/snort -A fast -b -d -D -i eth1 -s -u snort -g snort -c
/etc/snort/snort.conf -l /var/log/snort
/usr/sbin/snort -b -d -D -i eth1 -s -u snort -g snort -c
/etc/snort/snort.conf -l /var/log/snort

snort.conf:
output alert_syslog: LOG_LOCAL0 LOG_ALERT

syslog.conf:
local0.*
     /var/log/foo.log
*.info;mail.none;authpriv.none;cron.none;local0.none /var/log/messages

I see stuff going into /var/log/messages but that's it. What am I missing?

------------------------------------------------------------------------------
Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are
powering Web 2.0 with engaging, cross-platform capabilities. Quickly and
easily build your RIAs with Flex Builder, the Eclipse(TM)based development
software that enables intelligent coding and step-through debugging.
Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]