[Snort-users] Port scan not being logged? at 0 %?

M Shirk shirkdog_linux at ...125...
Wed Sep 29 05:26:27 EDT 2004


The Port scan on the first page in ACID is looking for a file with port 
scanning activity. You have to setup Snort to log the port scanning activity 
with the Portscan Detector

http://www.snort.org/docs/writing_rules/chap2.html#tth_sEc2.4.2


Shirkdog


>From: "RD R" <careergeek at ...125...>
>To: snort-users at lists.sourceforge.net
>Subject: [Snort-users] Port scan not being logged?  at 0 %?
>Date: Tue, 28 Sep 2004 19:52:31 -0400
>

_________________________________________________________________
On the road to retirement? Check out MSN Life Events for advice on how to 
get there! http://lifeevents.msn.com/category.aspx?cid=Retirement
-------------- next part --------------
An embedded message was scrubbed...
From: "RD R" <careergeek at ...125...>
Subject: [Snort-users] Port scan not being logged?  at 0 %?
Date: Tue, 28 Sep 2004 19:52:31 -0400
Size: 3147
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20040929/2160e85d/attachment.mht>


More information about the Snort-users mailing list