[Snort-users] Snort on proxy (outbound alerts)
bala150985 at ...11827...
Fri Jan 18 06:24:02 EST 2013
On Fri, Jan 18, 2013 at 4:29 AM, Thibaud Raso <joga3.web at ...11827...> wrote:
> Hi everybody,
> I'm having a problem with my running instance of Snort which is setup on
> my proxy server(squid), and uses the ET ruleset.
> I've been looking for a solution for a while, but I still have no answer.
> My problem is, that for some rules, it alerts me on outbound traffic
> instead of inbound traffic, let me explain:
Could you let us know the number of interface on your proxy server ?
Which interface are you making snort listen on ?
Which interface is your proxy listening on ?
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-users