[Snort-users] Problem with Snort IDS

Marcio Demetrio Bacci marciobacci at ...11827...
Fri Nov 11 18:59:53 EST 2016


Hi,

I have installed a Snort server (virtual machine) as IDS on Ubuntu 14-04
LTS.

I noticed that it only monitors the traffic directed to snort itself. When
I execute ping or portscan command from a host to another server on the
network, it is not registered by snort.

It looks like the interface is not listening in promiscuous mode.

I am starting snort as follows:

/usr/sbin/snort -q -u snort -g snort -c /etc/snort/snort.conf -i eth0 -D


Anyone have any idea what is the problem?

Regards,

Márcio
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20161111/d2fc184d/attachment.html>


More information about the Snort-users mailing list