On Fri, 14 Mar 2003, Mipam wrote:

> Any hints what i should change in the /etc/syslog.conf to
> get snort messages on my console directly?

What syslog facility and level is it being logged too?

See your output alert_syslog configuration in your snort config.

Maybe "local3.info" or "auth.alert"??

Anyways, edit your /etc/syslog.conf so the action (for that
facility.level" is /dev/console (or "root" or other user to output to
their console when logged in).

Be sure it is separated by tab character(s). Then send HUP to syslogd or
"/etc/rc.d/syslogd reload"

   Jeremy C. Reed
   http://bsd.reedmedia.net/