> -----Original Message----- > From: mike Hughes > Sent: Thursday, March 20, 2003 6:47 PM > Subject: Bind and Snort filling up LOGs and Tripwire! > > > Whats Up! > > I have Bind9 and the snort 1.9.1 running on my Linux 7.3 > machine. But these 2 programs running are filling up my > /var/log/messages and my TRIPWIRE reports logs. here is > an example of what im talking about:I get these > messages in mmy TRIPWIRE reports and /var/log/messages > file(its all the websites people on my network have visited > soo you can imagine how much traffic i get into both logs > tripwire reports and /var/log/messages) > ### I start named as root(it wont start with a user? like > this---/usr/sbin/named -u named #### and here is my > named.conf file is at the bottom:
Your logging virtaully everything under the sun to syslog. Either turn off some of the logging catagories (like queries) or change logging to a file. i.e. /var/log/named.log Also, you've got other problems if named will not start as user named. Does the named user exist? Steve Cowles -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list