> -----Original Message-----
> From: mike Hughes
> Sent: Thursday, March 20, 2003 6:47 PM
> Subject: Bind and Snort filling up LOGs and Tripwire!
> 
> 
> Whats Up!
> 
> I have Bind9 and the snort 1.9.1 running on my Linux 7.3 
> machine. But these 2 programs running are filling up my
> /var/log/messages and my TRIPWIRE reports logs. here is
> an example of what im talking about:I get these 
> messages in mmy TRIPWIRE reports and /var/log/messages 
> file(its all the websites people on my network have visited
> soo you can imagine how much traffic i get into both logs
> tripwire reports and /var/log/messages)
> ### I start named as root(it wont start with a user? like 
> this---/usr/sbin/named -u named #### and here is my
> named.conf file is at the bottom:

Your logging virtaully everything under the sun to syslog. Either turn off
some of the logging catagories (like queries) or change logging to a file.
i.e. /var/log/named.log 

Also, you've got other problems if named will not start as user named. Does
the named user exist?

Steve Cowles



-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to