[Snort-users] Snort is too quiet!

Guillaume guillaume at ...4029...
Thu Jan 24 01:54:04 EST 2002


>
> Hi ,
>
> Now I can see some TCP alerts in ACID (about 57%) but all of them
> have the same destination address!
> I've already set my NIC to pormisc mode it should see everything
> going on in my network right? (or I might misunderstand
> somrthing).
> Any suggestion?
>

Are you on a switched lan ?

Guillaume

[ Sent with SquirrelMail -  http://www.squirrelmail.org     ]






More information about the Snort-users mailing list