Re: running snort as packet logger and nids simultaneously

[Joel Esler <eslerj () gmail com>]

You'd have to run two different instances of snort, or make the nids
in Snort log every packet.  I'd go with option one.  Option two has
the possibility of dropping > packets...

J

On 6/7/05, Metal Gear <finattack () gmail com> wrote:
> hi all,
>  is this possbile to run snort as both packer logger and nids simultaneously
> as i m trying to run snort with the following command but i m not getting
> the packet logs in 'snortlogs' folder
>  
>  /usr/local/bin/snort -u snort -g snort -l /var/log/snortlogs -b -c
> /usr/local/etc/snort.conf -D
>  
>  but when i run as 
>  /usr/local/bin/snort -u snort -g snort -l /var/log/snortlogs -b -D
>  it can now log packets in the respected folder,
>  
>  Thanks
>  
>  


-- 
Joel Esler
BASE Project Lead
http://sourceforge.net/projects/secureideas


-------------------------------------------------------
This SF.Net email is sponsored by: NEC IT Guy Games.  How far can you shotput
a projector? How fast can you ride your desk chair down the office luge track?
If you want to score the big prize, get to know the little guy.
Play to win an NEC 61" plasma display: http://www.necitguy.com/?r 
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users