[Snort-users] Problem with Snort IDS
Marcio Demetrio Bacci
marciobacci at ...11827...
Fri Nov 11 18:59:53 EST 2016
I have installed a Snort server (virtual machine) as IDS on Ubuntu 14-04
I noticed that it only monitors the traffic directed to snort itself. When
I execute ping or portscan command from a host to another server on the
network, it is not registered by snort.
It looks like the interface is not listening in promiscuous mode.
I am starting snort as follows:
/usr/sbin/snort -q -u snort -g snort -c /etc/snort/snort.conf -i eth0 -D
Anyone have any idea what is the problem?
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-users