[Snort-inline-users] logging question

[Michael W C. <co...@ca...>]

I think I've FINALLY figured out what I was doing wrong (thinking I
was smart enough to do this, for starters), but I need to verify
something.  Can someone tell me how to make a rule log to either a
text file (preferable) or syslog, and what does a log entry for a
packet being dropped look like (exactly please).

Thanks!

(If you're curious, it looks like my firewall was hanging onto rules
that I _THOUGHT_ I had deleted from the config.  I manually flushed
all chains and restarted everything, and it looks like it's working
now.  maybe.)

Mike-
--
If you're not confused, you're not trying hard enough.
--
Please note - Due to the intense volume of spam, we have installed 
site-wide spam filters at catherders.com.  If email from you bounces,
try non-HTML, non-encoded, non-attachments,