title: Read the alert log from snort
body: <p>I have a new instance with snort setup.
  When I tried to look at the alert log I noticed that the directory doesn't have a /var/log/snort/alert file.
  I tried to touch this file and to chmod to give read and write access to my snort user but I still have no alert (even if I create a rule to catch all the calls and put them in the log them as errors)</p>
  
  <pre><code>alert ip any any -&gt; any any ( msg: "ICMP packet detected!"; sid: 1; )
  </code></pre>
  
  <p>Any idea if I am missing something.</p>
  
  <p>By the way here is the command I run for Snort:</p>
  
  <pre><code>sudo /usr/sbin/snort -m 027 -D -d -l /var/log/snort -u snort -g snort -c /etc/snort/snort.conf -S HOME_NET=[192.168.0.0/16] -i eth0
  </code></pre>
  
  <p>Am I missing something?</p>