[Snort-users] ACID and portscan reporting

roman at ...438... roman at ...438...
Mon Oct 15 21:06:01 EDT 2001


The database plugin probably has not been configured correctly to support portscans.
See Question #B-7 of the ACID FAQ: http://acidlab.sourceforge.net/acid_faq.html

Roman

> On Wed, 19 Sep 2001, Lists wrote:
>
> > I see that port scans are being logged to alert.ids, yet nothing shows
> > up in ACID under portscans.
> >
> > All of the rules seem to be working fine.  I am sure this is probably
> > something simple that I am overlooking.
> >
> > Anybody?
> >
> >
> >
> > Ben
Keepper


---------------------------------------------
This message was sent using Voicenet WebMail.
      http://www.voicenet.com/webmail/






More information about the Snort-users mailing list