Re: Subject: Reload rules w/o restarting ? (or overwriting snort.log)

[Steve.Rudolph () jwt com]

Hmm,
Maybe I have a problem here then.  It does overwrite the logfile everytime
and does not seem to save the old one!
This is my run command: /usr/local/bin/snort -i eth0 -b -o -l
/var/snort/logs/ -L snort.log -c /var/snort/conf/snort.conf -D
Might there be something in the snort.conf file?

Steve Rudolph CCSA, CCSE
J. Walter Thompson
World Wide IT


                                                                                                                        
       
                    Erek Adams                                                                                          
       
                    <erek () theadamsfamily net>           To:     Steve Rudolph/WWIT/J Walter Thompson@JWT             
          
                    Sent by:                            cc:     <snort-users () lists sourceforge net>                  
          
                    snort-users-admin@lists.sourc       Subject:     Re: Subject: [Snort-users] Reload rules w/o 
restarting ?  
                    eforge.net                           (or overwriting snort.log)                                     
       
                                                                                                                        
       
                                                                                                                        
       
                    10/12/2001 04:58 PM                                                                                 
       
                                                                                                                        
       
                                                                                                                        
       




On Fri, 12 Oct 2001 Steve.Rudolph () jwt com wrote:

> Thank you for that.  Now is there a way to continue to append to the
> snort.log file when logging packets in binary form while not overwriting
> it?

No real need to worry about it.  Snort will use a format like
"0828 () 0802-snort log" for the file name.  mmdd@hhmm is the date and time
that
snort was last restarted.  No log overwrites.

Cheers!

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users