[Snort-users] Logs

Helder Miguel Rodrigues crash at ...9650...
Tue Jul 15 09:21:16 EDT 2003


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 
Hello I have my workstation running snort with no probs.
My workstation is directly connected to the internet via eth0!

so I have in my config file:
var HOME_NET $eth0_ADDRESS
var EXTERNAL_NET !$HOME_NET

But in acid it appears  ATTACK RESPONSES 403 and my CHAT MSN messages, 
how can I prevent to log this things?

I just want to log what came from the internet, not what goes to the 
internet.

Thanks a lot

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2-nr1 (Windows XP)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
 
iD8DBQE/FCmuXuDuuXe+pHkRAvS2AKCF/nMjoNfOPcT5Zne9AgJTz3rVegCgnVm2
jqdZRBrC8edooLSgQD6mqws=
=O4Wx
-----END PGP SIGNATURE-----






More information about the Snort-users mailing list