[Snort-users] Snort Log only shows http_inspects
G Ramon Gomez
gene at ...13522...
Mon Dec 26 09:23:00 EST 2005
How is your network set up? Is snort in a place where it can actually
see all traffic?
What flags are you starting snort with?
How are the preprocessors configured?
Palula Brasil wrote:
>I'm running snort as a service. It starts automatically when my Linuxbox
>(Fedora Core 3) starts. But I think something is wrong because it isn'r
>logging any portsweping or portscans on the log folder. It only logs
>(http_inspect) wich I think happens when we browse sites with evil
>I made some portsweeping yesterday from a computer outside my network (at
>work) and Snort didn't report anything...
More information about the Snort-users