Snort mailing list archives
Snort Alert File and Summary Statistics
From: Real Cucumber <monkcucumber () yahoo com>
Date: Wed, 7 Jul 2004 09:59:29 -0700 (PDT)
Hi,
Using Fedora Core 2 with snort-2.1.3-1.1, I am not
able to get it to produce any data in the "alert" file
using the following command:
snort -A full -D -l /var/log/snort/dir
It does capture all the traffic though, just doesn't
create any alerts.
I've also tried using the -c snort.conf rules thing
(using latest set of snort rules) - but that doesn't
do it either.
Reason I need the alert file is so I can do summary
analysis on the traffic using snortalog or snortsnarf
- they don't work without the alert file!
Does anyone know of a data analysis tool that will
work on the snort traffic data/directories instead of
hte alert file? Or how to fix my alert file problem?
Thanks!!!
__________________________________
Do you Yahoo!?
Yahoo! Mail - 50x more storage than other providers!
http://promotions.yahoo.com/new_mail
-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 -
digital self defense, top technical experts, no vendor pitches,
unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort Alert File and Summary Statistics Real Cucumber (Jul 07)
