[Snort-users] how to enable portscan alert

twig les twigles at ...131...
Thu Feb 19 21:27:12 EST 2004


--- "M. Salman Farisi" <msalmanf at ...11176...> wrote:
> 
> How to enable portscan alert and log it to
> /var/log/snort/alert and mysql
> database
> I have make preprocessor flow enable but when i run snort -c
> /etc/snort/snort.conf it said : SCAN_ALERTS : INACTIVE
> 
> I want to detect and log every portscan to my machine
> 


http://acidlab.sourceforge.net/acid_faq.html#faq_b7

=====
-----------------------------------------------------------
With a few exceptions, secrecy is deeply incompatible with
democracy and with science.
     --Carl Sagan  
-----------------------------------------------------------

__________________________________
Do you Yahoo!?
Yahoo! Mail SpamGuard - Read only the mail you want.
http://antispam.yahoo.com/tools




More information about the Snort-users mailing list