[Snort-users] portscan alerts?

Peters, Michael D. Michael.Peters at ...9763...
Thu Jan 22 09:46:16 EST 2004


I would like the portscan information to show up in the ACID % meter. The
information is being logged into the file /var/snort/portscan/lan.portscan
correctly.

My snort.conf has:
preprocessor portscan: 172.16.0.0/16 5 4 /var/snort/portscan/lan.portscan

If I remove the /var/snort/portscan/lan.portscan, will it display in the
ACID % meter?

Best regards,

Michael





More information about the Snort-users mailing list