/var/log/suricata.log increases ? - correct?<br>and in the second case it does not.<br><br>thanks<br><br><div class="gmail_quote">On Thu, Dec 15, 2011 at 1:23 PM, Delta Yeh <span dir="ltr"><<a href="mailto:delta.yeh@gmail.com">delta.yeh@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Ah, sorry. A stupid copy and paste mistake when I compile this mail.<br>
I confirm both tests use the same config file /etc/suricata/suricata.yaml.<br>
<br>
<br>
Peter,<br>
Yes, suricata create the log file, but after startup no log anymore.<br>
<br>
Without -D option ,I can see log file increased,<br>
With -D option, only the logs of startup.<br>
<br>
<br>
2011/12/15 Victor Julien <<a href="mailto:victor@inliniac.net">victor@inliniac.net</a>>:<br>
<div class="HOEnZb"><div class="h5">> On 12/15/2011 12:55 PM, Delta Yeh wrote:<br>
>> When run suricata with:<br>
>> src/.libs/suricata -c /etc/suricata/suricata.yaml -i eth0<br>
>><br>
>> I can see logs.<br>
>><br>
>> When run suricata with:<br>
>><br>
>> src/.libs/suricata -c /secone/websensor/conf/websensor.yaml -D -i eth0<br>
>><br>
>> I can't see logs.<br>
><br>
> You're using different configs here, are you sure<br>
> /secone/websensor/conf/websensor.yaml has the logging enabled?<br>
><br>
> --<br>
> ---------------------------------------------<br>
> Victor Julien<br>
> <a href="http://www.inliniac.net/" target="_blank">http://www.inliniac.net/</a><br>
> PGP: <a href="http://www.inliniac.net/victorjulien.asc" target="_blank">http://www.inliniac.net/victorjulien.asc</a><br>
> ---------------------------------------------<br>
><br>
> _______________________________________________<br>
> Oisf-users mailing list<br>
> <a href="mailto:Oisf-users@openinfosecfoundation.org">Oisf-users@openinfosecfoundation.org</a><br>
> <a href="http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" target="_blank">http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a><br>
_______________________________________________<br>
Oisf-users mailing list<br>
<a href="mailto:Oisf-users@openinfosecfoundation.org">Oisf-users@openinfosecfoundation.org</a><br>
<a href="http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" target="_blank">http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br>Peter Manev<br>