[Snort-users] Alert_SMB

Scott Elgram SElgram at ...10477...
Tue Nov 11 06:11:21 EST 2003


    I have been trying to get SMB alerts to work with my snort.  I have it running on RH9 and for testing purposes I have 1 rule file active;

output alert_smb: workstation.list (which contains only my workstation)
alert icmp any any -> 192.168.0.8 any (msg: "Ping!";)

I can't get it to work, I feel as though I am missing something but I don't know what.  help!

-Scott Elgram
IT/Systems Support
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20031111/7b325a65/attachment.html>


More information about the Snort-users mailing list