Re: loghog question

["Matthew Harrell" <mhar () plex com>]

Nevermind--I got it.  The ignore file is to ignore hosts in the automatic
firewall blocking--not in reporting.

-----------------
Matt Harrell
Plexus Systems
mhar () plex com


-----  On 10/7/2002 1:11 PM, Matthew Harrell <mhar () plex com> wrote: 
> Not sure if this is an appropriate list for a loghog question, but I can't
> find any online resources for issues with loghog (other than e-mailing the
> author).
>
> I'm running Snort 1.8.7 on Mandrake Linux 9.0 with loghog 0.1.
>
> I have several entries in my loghog "ignore_hosts" file.  One node is
> giving me constant false alarms, and I'm trying to get loghog to quit
> sending me e-mails about it.  However, even with the entry in ignore_hosts,
> I'm still getting the e-mails.  I've killed and restarted loghog, but I'm
> still getting those darn e-mails.  Any suggestions from other loghog 
> users?
>
> -----------------
> Matt Harrell
> Plexus Systems
> mhar () plex com
>
>
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users