Re: Snort rules questions

[Erek Adams <erek () theadamsfamily net>]

On Wed, 3 Oct 2001, Sloan Miller wrote:

> It was late last night when I responded and I forgot to say that I am
> running IPChains and I was when my little box was running fine for about 12
> hours.  I am also running PortSentry.

heh...  Been there, done that, still doing it...  :)

Try dropping your IPChains and Portsentry.  Do that, and snort should light up
like a Christmas tree.

[...snip...]

> I don't know where I got the idea that there were 100 or so maybe from the
> chain headers.

Prolly so....

Good luck!

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users