[Snort-users] Snort on proxy (outbound alerts)
joga3.web at ...11827...
Fri Jan 18 06:50:05 EST 2013
Thank you for answering.
Only one interface on my proxy machine.
SQUID/Snort listenin on the same one.
2013/1/18 Balasubramaniam Natarajan <bala150985 at ...11827...>
> On Fri, Jan 18, 2013 at 4:29 AM, Thibaud Raso <joga3.web at ...11827...> wrote:
>> Hi everybody,
>> I'm having a problem with my running instance of Snort which is setup on
>> my proxy server(squid), and uses the ET ruleset.
>> I've been looking for a solution for a while, but I still have no answer.
>> My problem is, that for some rules, it alerts me on outbound traffic
>> instead of inbound traffic, let me explain:
> Could you let us know the number of interface on your proxy server ?
> Which interface are you making snort listen on ?
> Which interface is your proxy listening on ?
> Balasubramaniam Natarajan
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-users