[Snort-users] nmap scans don't appear in portscan.log

Erek Adams erek at ...577...
Mon Apr 1 23:00:37 EST 2002


On Mon, 1 Apr 2002, Salomon, Charlie wrote:

> I'm a Snort newbie and need some help.  I configured Snort 1.8.4 on Linux
> (Slackware 7.1) with the default snort.conf file except for the HOME_NET
> variable.  We use a 172.xx.x.0 internal network with a 255.255.252.0 mask.
> The HOME_NET entry is 172.xx.x.0/22.
>
> I ran nmap against the Snort box and the scans were properly detected.
> However, when I ran a scan against nother machines on our network, the scans
> were not detected.  I am running snort as a daemon with the following
> parameters:

[...snip...]



More information about the Snort-users mailing list