[Snort-users] ids problems

Guillaume Arcas guillaume.arcas at ...953...
Thu Apr 22 01:00:17 EDT 2004


Jasmine CHUA a dit :
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Thanks for your reply. I have tried that before. But it still does not
> work. :(

If you want flow-portscans alerts to be logged in your database, you have
to adjust the settings of your database output plugin (in snort.conf).

Here's a usefull link about how snort distinguishes - and uses - log and
alert facilities :
http://www.theadamsfamily.net/~erek/snort/logging_methods.txt



-- 
Guillaume Arcas

--------------------------------------------------
Il faut nous quitter. Nous sommes deux enfants,
nous avons fait une folie. (Yvonne de Galais)




More information about the Snort-users mailing list