[Snort-users] Snort config question

Ryan Russell ryan at ...35...
Sun Feb 3 21:50:15 EST 2002


On Sun, 3 Feb 2002, Chris W. wrote:

> System #1
>
> OS: Windows XP Pro
> Snort 1.8.2
> MySql
> Acid

Does System #1 pick up everything it should?

>
> System #2
>
> OS: Windows XP Pro
> Snort 1.8.2
> ZoneAlarm
> BlackIce

You're in unknown territory by running multiple IDS/firewall products on
the same box.  It's entriely possible that BlackICE is getting the
packets first, and blocking them.  In order to see if Snort is failing,
you'll have to temporarily uninstall the other two products.

						Ryan





More information about the Snort-users mailing list