[Snort-users] snort is running but not reporting

Billy Smith bsmith at ...262...
Sun Aug 6 19:48:42 EDT 2000

I have the same issue.  When I run CyberCop against the box with snort, I 
only get the following alert:

08/04-13:57:17.597229  [**] Tiny Fragments - Possible Hostile Activity [**] 
*.118 -> *.77

I am running snort with the following options:
snort -d -A fast -D -N -c snort-lib

I have put something bogus in my HOME_NET variable.

Does anyone have any ideas as to what I am missing?

At 04:38 PM 8/6/2000 -0400, Robert Wright wrote:
>im running Snort 1.6.3
>the command line : snort -d -b -D -s -c /home/dogz/vision.conf
>/var/log/snort/ : theres files but nothing in em except for
>"snort-0805 at ...260..." has wierd charicters in them
>Did you turn on the portscan preprocesor?: yes preprocessor portscan:
>$INTERNAL 3 5 /var/log/snort/portscan
>Did you set the INTERNAL/EXTERNAL/HOME_NET variables to the network you're
>using? :
>Snort-users mailing list
>Snort-users at lists.sourceforge.net

More information about the Snort-users mailing list