Snort.org home  
Got Source? About Snort About Sourcefire Snort FAQ
Sourcefire Network Security - the creators of Snort

Snort Forums Archive

Archive Home » Linux » Snort log files seem hard wired.

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

Snort log files seem hard wired.


Posted by baomike on August 17, 2006 17:46:34

I was attempting to change the log directory from /var/log/snort to /sys/snort/log. This is on a diff drive and has the space for numerous entrys. It appears that the /var/log /snort director is hard coded in util.c. Is this correct? There does seem to be no mention in the configure or the snort.conf files.
This seem like a natural for user configuration.

Posted by brevizniak on August 18, 2006 19:10:32

-l /sys/snort/log

or

http://www.snort.org/docs/snort_htmanuals/htmanual_260/node10.html

config logdir: /sys/snort/log