[Snort-users] no alerts

Joel Esler eslerj at ...11827...
Tue Oct 14 08:40:06 EDT 2008


On Oct 14, 2008, at 4:42 AM, Soniya Balram wrote:

> Hi all,
> I am unable to get alerts in detecting port scans using snort. I am  
> using stream4 preprocessor to detect scans.
> preprocessor stream4 : detect_scans
>
> I am also using sfportscan preprocessor
> preprocessor sfportscan: proto { all} \
> scan_type { all } \
> sense_level { high }
>
> I have not included any rules.
>

What version of Snort are you running?





More information about the Snort-users mailing list