[Snort-users] Snort Log only shows http_inspects

G Ramon Gomez gene at ...13522...
Mon Dec 26 09:23:00 EST 2005


How is your network set up?  Is snort in a place where it can actually 
see all traffic?
What flags are you starting snort with?
How are the preprocessors configured?

- Ramon

Palula Brasil wrote:

>I'm running snort as a service. It starts automatically when my Linuxbox
>(Fedora Core 3) starts. But I think something is wrong because it isn'r
>logging any portsweping or portscans on the log folder. It only logs
>(http_inspect) wich I think happens when we browse sites with evil
>content...
>
>I made some portsweeping yesterday from a computer outside my network (at
>work) and Snort didn't report anything...
>  
>




More information about the Snort-users mailing list