[Snort-users] ACID/MySQL/Snort portscan log file

Jason Gauthier jgauthier at ...6155...
Tue Jul 9 07:00:08 EDT 2002


Using snort 1.8.6, logging to MySQL.

Within the acid_conf.php config file it mentions a location for a portscan
log file.

I'm under the impression that snort does not log portscans to the database.
So what I wanted to know, was is there a way to log portscans without
logging alerts too.
(I don't want to do double logging)

Any suggestions? Maybe my approach is wrong.  I'm pretty inexperienced with
snort and it's options.

Thanks,




More information about the Snort-users mailing list