[Snort-users] snort 2.6 not logging icmp messages

Joel Esler joel.esler at ...1935...
Wed Jun 21 07:42:03 EDT 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Do you have your ICMP rules turned on in your snort.conf?

J

teknet at ...7692... wrote:
> Hello
> 
> I moved from snort 2.4.3 to 2.6.0. I copied configuration file along with all rules files.
> New snort works fine except one thing: it does not log any icmp alerts any more (only tcp and udp). Why ? I looked in the logs but did not find any interesting.
> 
> Thanx
> 
> 
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
> 

- --
+---------------------------------------------------------------------+
Joel Esler  	     Senior Security Consultant 	1-706-627-2101
Sourcefire    Security for the /Real/ World -- http://www.sourcefire.com
Snort - Open Source Network IPS/IDS -- http://www.snort.org
GPG Key http://demo.sourcefire.com/jesler.pgp.key
+---------------------------------------------------------------------+
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFEmTCKKbCSyXHckt4RAhYRAJ9bRCaAOwH1+oY8A7Am1tZGDpAF+ACgmNMb
IzUj4z4AlTvmmmq1HET/WNQ=
=j5uA
-----END PGP SIGNATURE-----




More information about the Snort-users mailing list