[Snort-users] The logged snort alert # and the final stat do not match

Lin Zhong Lin.Zhong at ...11426...
Fri May 21 14:06:06 EDT 2004

Hi, I try to run snort on some tcpdump files, and I found a mismatch between the # of alert logged and the # of alert found and logged shown in the snort final statistic output. 

The final stat shows that there are 728 alerts found and loged, no passed. But in my alerts log file, I only find 640 alerts. 

Anybody know what causes this gap? Where do those near 100 alerts go?

Many thanks,


More information about the Snort-users mailing list