Snort3 Logging format
Hakar Shamal via Snort-users <[email protected]>
| Newsgroups | gmane.comp.security.ids.snort.general |
|---|---|
| Message-ID | <CAJ_j8fTy_YCGMCD8ZH+E8Y7U2jJ0m4X==8zjZw5hKuBvPgF_wQ@mail.gmail.com> |
Hello,
I've configured snort 3 and i've enabled logging to an output file but the
logs appear like the following. Is there any way to remove the " " around
the description from the snort config file?
<38>Jun 5 17:16:39 snort snort: [1:1000001:1] "ICMP connection test" {ICMP}
172.30.0.3 -> 172.100.0.42
Thank you so much,
Regards,
_______________________________________________
Snort-users mailing list
[email protected]
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users
To unsubscribe, send an email to:
[email protected]
Please visit http://blog.snort.org to stay current on all the latest Snort news!
Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette