Quantcast
Viewing all articles
Browse latest Browse all 4615

Cisco switch SPAN and Snort need help

Update:

Discovered the -E command line argument for snort. This sends the alert messages to Event Viewer. So now I have a working snort on VIsta.

This doesn't solve the whole puzzle. When I specify in snort.conf the "config logdir:" parameter, I used "c:\snort\log". If I then start snort from a non-elevated command prompt, I get an error saying it can't set the log directory. Which is strange, because the Users group has full control of the \snort\log. If I start snort using an elevated command prompt, then I get no problems.

Viewing all articles
Browse latest Browse all 4615

Trending Articles