Snort not logging....

["Mike Koponick" <mike () redhawk info>]

Hello,

I know this has been discussed, and discussed... but I'm a little lost.

I have SNORT configured to log to /var/log/snort/snort.log, however,
everything goes to var/log/messages instead. I would rather keep the Snort
logs seperate for parsing purposes.

I'm running RH 8.0 and Snort 1.9.

Here is a glimps into my config:


In my snort.conf file I have:
# alert_syslog: log alerts to syslog
# ----------------------------------
# Use one or more syslog facilities as arguments
#
output alert_syslog: LOG_AUTH LOG_ALERT

Here is my startup script:
INTERFACE=eth1
CONFIG=/etc/snort/snort.conf
# See how we were called.
case "$1" in
  start)
        echo -n "Starting snort: "
        ifconfig $INTERFACE promisc
        daemon /usr/local/bin/snort -U -o -z -i $INTERFACE -d -D -c
$CONFIG -l /var/log/snort/snort.log

Thanks in advance for your help.

Mike



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users