[prads-users] [Snort-users] HTTP port statistics

Jefferson, Shawn Shawn.Jefferson at bcferries.com
Tue Apr 6 17:52:18 CEST 2010


Hi Edward,

Thanks!  After doing that, the perl script to turn it into a host attribute table can take the two asset logs and create one XML file, or should one append the two asset logs together first?

Thanks,
Shawn

-----Original Message-----
From: Edward Bjarte Fjellskål [mailto:edward.fjellskal at redpill-linpro.com] 
Sent: Tuesday, April 06, 2010 6:31 AM
To: Jefferson, Shawn
Cc: prads-users at projects.linpro.no
Subject: Re: [prads-users] [Snort-users] HTTP port statistics

Edward Bjarte Fjellskål wrote:
> Jefferson, Shawn wrote:
>> Also, I have two interfaces that are sniffing on this machine, can I run two separate PRADS instances, and will each update their own asset file in the tmp directory, or will both update the same file?
> 
> atm. prads has hardcoded where to write prads-asset.log. This was not
> intended to be permanent. My next thing on my todo list, is to
> implement a commandline switch and a config option to have the
> user specify the file they want.

Hi again,

I did add the feature just after writing the email.

In prads.conf:
asset_log=/path/to/your/file.something

E


More information about the prads-users mailing list