[Snort-users] portscan alerts?
Peters, Michael D.
Michael.Peters at ...9763...
Thu Jan 22 09:46:16 EST 2004
I would like the portscan information to show up in the ACID % meter. The
information is being logged into the file /var/snort/portscan/lan.portscan
My snort.conf has:
preprocessor portscan: 172.16.0.0/16 5 4 /var/snort/portscan/lan.portscan
If I remove the /var/snort/portscan/lan.portscan, will it display in the
ACID % meter?
More information about the Snort-users