Re: snort switches

[Chris Green <cmg () uab edu>]

"snortlst snortlst" <snortlst () hotmail com> writes:

> What are the most recommended switches for starting snort ?
> Should I log it to binary file and then decode it, or should I use 'normal'
> logging?

-b and -A fast are a nice compromise between pure speed and knowing
what is going on at once.


-- 
Chris Green <cmg () uab edu>
I've had a perfectly wonderful evening. But this wasn't it.
     -- Groucho Marx

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users