[Snort-users] Snort is too quiet!

Guillaume guillaume at ...4029...
Mon Jan 21 02:06:08 EST 2002


>
> Hi,
>
> Now I remove -l option and snort starts to catch something( thank
> you!thank you!) but only ICMP packet!!!!
> Is this typically normal ??

Well... it is not typically anormal !! :-)

> I also checked  the /var/log/snort it also has the same ICMP
> alert and no TCP or UDP .
> Forgive me but I'm really new to snort..I have to ask the same
> question again; What did I miss?

What's in your snort.conf file ?

Guillaume

[ Sent with SquirrelMail -  http://www.squirrelmail.org     ]






More information about the Snort-users mailing list