[Snort-users] Snort is not logging my port scans

Abe Froman abe__froman at ...125...
Sun Dec 28 20:46:01 EST 2003


I ran(from another machine on a different network)
nmap -sS 45.9.3.115
nmap  45.9.3.115
nmap -O 45.9.3.115

But the port scan log is empty
# ll /var/log/portscan.log
-rw-r--r--    1 root     root            0 Dec 28 22:22 
/var/log/portscan.log

even through i added
preprocessor portscan: 45.9.3.0/24 5 7 /var/log/portscan.log

# preprocessor flow: stats_interval 0 hash 2
preprocessor portscan: 45.9.3.0/24 5 7 /var/log/portscan.log
# frag2: IP defragmentation support

and started snort by running
./snort -de -l ./log

Got any tips?

_________________________________________________________________
Tired of slow downloads? Compare online deals from your local high-speed 
providers now.  https://broadband.msn.com





More information about the Snort-users mailing list