[Snort-users] acid console issue

Michael Steele michaels at ...155...
Mon Jan 20 21:47:01 EST 2003


Dane,

As soon as you start Snort, there will be a name added to the MySQL database
under the 'sensor' table. I believe the name comes from the 'sensor_name='
located in the output database line.

 -Michael

 Michael Steele | System Engineer / Support Technician
 mailto:michaels at ...155...
 Silicon Defense: IDS solutions - http://www.silicondefense.com
 Snort: Open Source Network IDS - http://www.snort.org


-----Original Message-----
From: snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net] On Behalf Of Dane Howard
Sent: Sunday, January 19, 2003 8:13 AM
To: 'Saúl Bósquez'; 'Snort User Groups'
Subject: RE: [Snort-users] acid console issue

I don't think you will show any sensors until you actually generate some
alerts.  Acid pulls the sensors from the alerts it gets and since you
have no alerts, Acid doesn't know you have any sensors.  Try to trip
some alerts to each sensor.

Dane

-----Original Message-----
From: snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net] On Behalf Of Saúl
Bósquez
Sent: Friday, January 17, 2003 5:48 PM
To: Snort User Groups
Subject: [Snort-users] acid console issue

Im running the snortcenter console on my db box, and i select view
sensors
and i get the "sensor running" message in green and a Pid# 1862 ...
I went to the sensor box and wrote "ps -u root" to see my process list
and i
got a #1862 process named snort.. so that means that the sensor is up a
running  but in the ACID console i get 0 sensors..

Sensors: 0
Unique Alerts: 0    (   0 categories   )
Total Number of Alerts: 0


-------------------------------------------------------
This SF.NET email is sponsored by: Thawte.com - A 128-bit supercerts
will
allow you to extend the highest allowed 128 bit encryption to all your 
clients even if they use browsers that are limited to 40 bit encryption.

Get a guide
here:http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0030en
_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
This SF.NET email is sponsored by: FREE  SSL Guide from Thawte
are you planning your Web Server Security? Click here to get a FREE
Thawte SSL guide and find the answers to all your  SSL security issues.
http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en
_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list







More information about the Snort-users mailing list