[prev in list] [next in list] [prev in thread] [next in thread] 

List:       snort-devel
Subject:    [Snort-devel] Bug in logrotate and a documentation suggestion
From:       "Maarten Bremer" <maarten () xolphin ! nl>
Date:       2003-12-14 18:31:11
[Download RAW message or body]

Hi,

Snort is really great software, you all did a great job!

While installing it to our servers I discovered some minor error in the RPM
build (snort-2.0.4-1.i386.rpm). In /etc/logrotate.d/snort there is a
reference to "/va/rlog/snort". Obviously this should be "/var/log/snort".

It took me a while to figure out how to scan on multiple interfaces. The
documentation is referencing to the "S. Krahmer's patch" which is quite hard
to find. It took me very long to finally figure out the solution was easy,
it was almost working right out of the box. The only thing that needed to be
done was altering the INTERFACE option to ALL in /etc/sysconfig/snort. It
would be nice if you could add this to the FAQ / documentation, so other
people notice this great feature too.

Kind regards,

Maarten Bremer



-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id78&alloc_id371&opĚk
_______________________________________________
Snort-devel mailing list
Snort-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-devel

[prev in list] [next in list] [prev in thread] [next in thread]