[Snort-users] snort is running but not reporting

Billy Smith bsmith at ...262...
Sun Aug 6 19:48:42 EDT 2000


I have the same issue.  When I run CyberCop against the box with snort, I 
only get the following alert:

08/04-13:57:17.597229  [**] Tiny Fragments - Possible Hostile Activity [**] 
*.118 -> *.77


I am running snort with the following options:
snort -d -A fast -D -N -c snort-lib

I have put something bogus in my HOME_NET variable.

Does anyone have any ideas as to what I am missing?




At 04:38 PM 8/6/2000 -0400, Robert Wright wrote:
>im running Snort 1.6.3
>the command line : snort -d -b -D -s -c /home/dogz/vision.conf
>/var/log/snort/ : theres files but nothing in em except for
>"snort-0805 at ...260..." has wierd charicters in them
>Did you turn on the portscan preprocesor?: yes preprocessor portscan:
>$INTERNAL 3 5 /var/log/snort/portscan
>Did you set the INTERNAL/EXTERNAL/HOME_NET variables to the network you're
>using? :
>var INTERNAL 192.168.0.0/24
>var EXTERNAL !192.168.0.0/24
>
>
>Thanks
>
>
>_______________________________________________
>Snort-users mailing list
>Snort-users at lists.sourceforge.net
>http://lists.sourceforge.net/mailman/listinfo/snort-users





More information about the Snort-users mailing list