[Snort-users] Snort with Acid : Network
toothbrushhead at ...131...
Tue Aug 27 06:06:02 EDT 2002
j - you should try running snort as a packet sniffer at first, just to
check that it's seeing all the data it's supposed to.
If you're running on a switch, or a dual-speed non-bridging hub then you
won't see other traffic on the LAN
At 11:17 27/08/2002, j wrote:
>I have configured snort with mysql, acid. successfully in linux box.
>In the configuration i have specified
> var HOME_NET x.x.x.x/22
> var EXTERNAL_NET any
>Now the problem, after running snort for past 1 week... i am seeing
>details only of that ip address where snort is installed.
> and i didn't find any detail of other machines which are in network.
>I have done portscan from one machine to another machine, the snort
>machine which is in same network didn't detect.
>is it something more i have to do ??? ,
>if yes...wht it should be , snice its large network...
Email: toothbrushhead at ...131...
PGP Key ID: 0xEAA034D4
More information about the Snort-users