[Snort-users] snort is running but not reporting
bsmith at ...262...
Sun Aug 6 19:48:42 EDT 2000
I have the same issue. When I run CyberCop against the box with snort, I
only get the following alert:
08/04-13:57:17.597229 [**] Tiny Fragments - Possible Hostile Activity [**]
*.118 -> *.77
I am running snort with the following options:
snort -d -A fast -D -N -c snort-lib
I have put something bogus in my HOME_NET variable.
Does anyone have any ideas as to what I am missing?
At 04:38 PM 8/6/2000 -0400, Robert Wright wrote:
>im running Snort 1.6.3
>the command line : snort -d -b -D -s -c /home/dogz/vision.conf
>/var/log/snort/ : theres files but nothing in em except for
>"snort-0805 at ...260..." has wierd charicters in them
>Did you turn on the portscan preprocesor?: yes preprocessor portscan:
>$INTERNAL 3 5 /var/log/snort/portscan
>Did you set the INTERNAL/EXTERNAL/HOME_NET variables to the network you're
>var INTERNAL 192.168.0.0/24
>var EXTERNAL !192.168.0.0/24
>Snort-users mailing list
>Snort-users at lists.sourceforge.net
More information about the Snort-users