[Snort-users] Is snort working?

Al Lewis (allewi) allewi at cisco.com
Sun Feb 18 17:59:30 EST 2018


Are you sure that snort is seeing traffic correctly?

Write a custom rule and/or create some traffic or condition that will trigger a rule.


Albert Lewis
ENGINEER.SOFTWARE ENGINEERING
SOURCEfire, Inc. now part of Cisco
Email: allewi at cisco.com<mailto:allewi at cisco.com>
From: Snort-users <snort-users-bounces at lists.snort.org> on behalf of bobby via Snort-users <snort-users at lists.snort.org>
Reply-To: bobby <architectofthefuture at gmail.com>
Date: Sunday, February 18, 2018 at 3:04 PM
To: "snort-users at lists.snort.org" <snort-users at lists.snort.org>
Subject: [Snort-users] Is snort working?

I am using the default registered user snort rules.  I have not modified the rules.  I noticed that my snort log has not been updated/growing.  I would think by default, many rules would be enabled, and the log would grow exponentially in size.  Am I wrong to assume this?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20180218/2e3262b0/attachment.html>


More information about the Snort-users mailing list