Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: [Snort-users] HOW DOES ONE STOP an alert file from being Produced? |
|---|---|
| Date: | Thu, 9 Mar 2006 00:27:09 -0500 |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
- -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
-Marty
On Mar 7, 2006, at 4:18 PM, Jacob, Raymond A Jr wrote:
I know this is an old question. However, I could not find the answer.
I am sending alerts a mysql database so I don't need the alert file.
What has been done in the past, was to periodically delete the alertfile.
I thought there was a switch or a config statement I could use.
I tried config alertfile: /dev/null. Stopped snort. Restarted snort.
The alertfile is still generated.
Thank you, Raymond
- - -- Martin Roesch - Founder/CTO, Sourcefire Inc. - +1-410-290-1616 Sourcefire - Security for the Real World - http://www.sourcefire.com Snort: Open Source Network IDS - http://www.snort.org
- -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (Darwin)
iD8DBQFED7yVqj0FAQQ3KOARAtduAJ9cMl7g14lLEGdT9yWyW8QCxpiUFgCeLMWw lAdWhOhggCUzzwdHChwNXC0= =bhnW - -----END PGP SIGNATURE----- -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (Darwin)
iD8DBQFED7yuqj0FAQQ3KOARAqbcAJkBx1DDa/36+IDshM/ZxjSfcs7//QCeM+vb S8L1a2kGlthBY5Uhxf3Wvu0= =0L1k -----END PGP SIGNATURE-----
------------------------------------------------------- This SF.Net email is sponsored by xPML, a groundbreaking scripting language that extends applications into web and mobile media. Attend the live webcast and join the prime developer group breaking into this new coding territory! http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642 _______________________________________________ Snort-users mailing list Snort-users@lists.sourceforge.net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | RE: [Snort-users] Webx, GotoMyPc and Loophole, Ron Jenkins |
|---|---|
| Next by Date: | [Snort-users] Re: [Snort-users] HOW DOES ONE STOP an alert file from being Produced?, aktivists |
| Previous by Thread: | [Snort-users] HOW DOES ONE STOP an alert file from being Produced?, Jacob, Raymond A Jr |
| Next by Thread: | Re: [Snort-users] HOW DOES ONE STOP an alert file from being Produced?, Dirk Geschke |
| Indexes: | [Date] [Thread] [Top] [All Lists] |