[Snort-sigs] I'm very new to snort, please help

From: Ray Pierce <rpierce(at)theshop.net>
Date: Fri Apr 11 2003 - 09:59:31 EDT

It seems to be working just fine. The only problem is that the /var slice "fills up". Inside /var/log/snort, there are thousands of ip's.

I don't know how to control all those IP's, wonder if there is a way to delete them after 7 days. Perhaps a modification to snort.conf.

Ray Pierce
rpierce@theshop.net

---

This SF.net email is sponsored by: Etnus, makers of TotalView, The debugger for complex code. Debugging C/C++ programs can leave you feeling lost and disoriented. TotalView can help you find your way. Available on major UNIX and Linux platforms. Try it free. www.etnus.com

---

Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs Received on Fri Apr 11 10:35:00 2003